Merge pull request #12261 from edx/jibsheet/html-escape-email-settings-edx-dashboard

TNL-4396 Apply same fix to edx dashboard

themes/edx.org/lms/templates/dashboard.html

@@ -10,6 +10,7 @@ from microsite_configuration import microsite
 from django.core.urlresolvers import reverse
 import json
 from openedx.core.djangolib.js_utils import dump_js_escaped_json, js_escaped_string
+from openedx.core.djangolib.markup import Text, HTML
 %>
 
 <%
@@ -210,7 +211,7 @@ from openedx.core.djangolib.js_utils import dump_js_escaped_json, js_escaped_str
 
     <header>
       <h2 id="email-settings-title">
-        ${_("Email Settings for {course_number}").format(course_number='<span id="email_settings_course_number"></span>')}
+        ${Text(_("Email Settings for {course_number}")).format(course_number=HTML('<span id="email_settings_course_number"></span>'))}
         <span class="sr">,
           ## Translators: this text gives status on if the modal interface (a menu or piece of UI that takes the full focus of the screen) is open or not
           ${_("window open")}