Fixed allowing for execution of arbitrary Javascript in student response

ORA-256

The submitted student response, allowing for execution of arbitrary JavaScript.