Merge pull request #121

from stvstnfrd:discuss/xss
into Stanford-Online:master

common/static/coffee/src/discussion/views/discussion_thread_view_inline.coffee

@@ -45,7 +45,7 @@ if Backbone?
 
     expandPost: (event) =>
       @$el.addClass('expanded')
-      @$el.find('.post-body').html(@model.get('body'))
+      @$el.find('.post-body').text(@model.get('body'))
       @showView.convertMath()
       @$el.find('.expand-post').css('display', 'none')
       @$el.find('.collapse-post').css('display', 'block')
@@ -60,7 +60,7 @@ if Backbone?
       if postTop < curScroll
         $('html, body').animate({scrollTop: postTop})
       @$el.removeClass('expanded')
-      @$el.find('.post-body').html(@model.get('abbreviatedBody'))
+      @$el.find('.post-body').text(@model.get('abbreviatedBody'))
       @showView.convertMath()
       @$el.find('.expand-post').css('display', 'block')
       @$el.find('.collapse-post').css('display', 'none')