XSS in page content editor (Bug #1375092)

See bug for testing instructions

Change-Id: I05cc9c20399bdc6ad138a791e5318bc0fcdc7f0f
Signed-off-by: Robert Lyon <robertl@catalyst.net.nz>