html-inject-vuln: Backport escape html for inline discussions
Merge pull request #27 from edx-solutions/html-inject-vuln

html-inject-vuln: Backport escape html for inline discussions