be sure to escape all chars that need html escaping in fillTemplateData
be sure to escape all chars that need html escaping in fillTemplateData

fixes #3872

Change-Id: I9e02184a798b78f090b6cc41a3dd4f21f5f7b665
Reviewed-on: https://gerrit.instructure.com/2373
Tested-by: Hudson <dfb64870173313a9a7b56f814c8e3b33e268497a@instructure.com>
Reviewed-by: Brian Palmer <3cb4e1df5ec4da2c7c4af7c52cec8cf340a55a10@instructure.com>
Reviewed-by: Brian Whitmer <760e7dab2836853c63805033e514668301fa9c47@instructure.com>

venturehive/canvas-lms,jay3126/canvas-lms,merichar/canvas-lms,shidao-fm/canvas-lms,efrj/canvas-lms,dgynn/canvas-lms,efrj/canvas-lms,redconfetti/canvas-lms,grahamb/canvas-lms,SwinburneOnline/canvas-lms,antoniuslin/canvas-lms,roxolan/canvas-lms,nditech/red-innovadores-lms,samuels410/greatlakes-lms,arrivu/qibla-ecampus,snehakachroo1/LSI_replica,juoni/canvas-lms,ShreniiNepal/shrenii_lmp,landonwilkins/canvas-lms,arrivu/arrivu-lms,Unow/canvas-lms,utkarshx/canvas-lms,juoni/canvas-lms,icelab/canvas,ShreniiNepal/shrenii_lmp,arrivu/qibla-ecampus,Unow/ins,wimemx/Canvas,utkarshx/canvas-lms,kyroskoh/canvas-lms,sdeleon28/canvas-lms,ottenhoff/canvas-lms,landonwilkins/canvas-lms,greyhwndz/canvas-lms,snehakachroo1/LSI_replica,arrivu/arrivu-lms,HotChalk/canvas-lms,faraazkhan/canvas,em2/canvas-lms,narigone/canvas,efrj/canvas-lms,rup/Tarrax,wimemx/Canvas,dgynn/canvas-lms,ankithbti/canvas_lms,redconfetti/canvas-lms,HotChalk/canvas-lms,nditech/red-innovadores-lms,juoni/canvas-lms,grahamb/canvas-lms,tgroshon/canvas-lms,tgroshon/canvas-lms,loganrun/pincan,ShreniiNepal/shrenii_lmp,landonwilkins/canvas-lms,wye0220/shindig-canvas,tgroshon/canvas-lms,shidao-fm/canvas-lms,Rvor/canvas-lms,eCNAP/CANVAS,shidao-fm/canvas-lms,roxolan/canvas-lms,utkarshx/canvas-lms,sfu/canvas-lms,whalejasmine/canvas-lms,arrivu/hoodemo,Jyaasa/canvas-lms,djbender/canvas-lms,Jyaasa/canvas-lms,matematikk-mooc/canvas-lms,leftplusrightllc/canvas-lms,arrivu/hiring-site,grahamb/canvas-lms,redconfetti/canvas-lms,sfu/canvas-lms,leftplusrightllc/canvas-lms,fronteerio/canvas-lms,dgynn/canvas-lms,wrdsb/canvas-lms,whalejasmine/canvas-lms,kyroskoh/canvas-lms,ankithbti/canvas_lms,antoniuslin/canvas-lms,leftplusrightllc/canvas-lms,instructure/canvas-lms,faraazkhan/canvas,parbros/red-innovadores-lms,sdeleon28/canvas-lms,grahamb/canvas-lms,parbros/red-innovadores-lms,Unow/ins,eCNAP/CANVAS,arrivu/hoodemo,leftplusrightllc/canvas-lms,skmezanul/canvas-lms,instructure/canvas-lms,instructure/canvas-lms,wimemx/Canvas,greyhwndz/canvas-lms,grahamb/canvas-lms,arrivu/hiring-site,narigone/canvas,snehakachroo1/LSI_replica,merichar/canvas-lms,sfu/canvas-lms,samuels410/greatlakes-lms,tgroshon/canvas-lms,instructure/canvas-lms,ShreniiNepal/shrenii_lmp,va7map/canvas-lms,skmezanul/canvas-lms,Unow/ins,matematikk-mooc/canvas-lms,whalejasmine/canvas-lms,sdeleon28/canvas-lms,eCNAP/CANVAS,juoni/canvas-lms,Unow/canvas-lms,va7map/canvas-lms,wrdsb/canvas-lms,loganrun/pincan,em2/canvas-lms,greyhwndz/canvas-lms,venturehive/canvas-lms,wrdsb/canvas-lms,usmschuck/canvas,gbleydon/canvas-lms,skmezanul/canvas-lms,samuels410/greatlakes-lms,sfu/canvas-lms,fronteerio/canvas-lms,SwinburneOnline/canvas-lms,parbros/red-innovadores-lms,arrivu/jigsaw-lms,fronteerio/canvas-lms,jay3126/canvas-lms,Rvor/canvas-lms,redconfetti/canvas-lms,djbender/canvas-lms,arrivu/jigsaw-lms,skmezanul/canvas-lms,SwinburneOnline/canvas-lms,loganrun/pincan,jay3126/canvas-lms,wrdsb/canvas-lms,AndranikMarkosyan/lms,kyroskoh/canvas-lms,icelab/canvas,arrivu/hoodemo,jay3126/canvas-lms,SwinburneOnline/canvas-lms,fronteerio/canvas-lms,sli7246/canvas_branch,antoniuslin/canvas-lms,arrivu/arrivu-lms,whalejasmine/canvas-lms,wye0220/shindig-canvas,merichar/canvas-lms,roxolan/canvas-lms,sfu/canvas-lms,wye0220/shindig-canvas,AndranikMarkosyan/lms,em2/canvas-lms,snehakachroo1/LSI_replica,faraazkhan/canvas,sdeleon28/canvas-lms,venturehive/canvas-lms,utkarshx/canvas-lms,sfu/canvas-lms,ottenhoff/canvas-lms,usmschuck/canvas,Jyaasa/canvas-lms,icelab/canvas,arrivu/hiring-site,djbender/canvas-lms,usmschuck/canvas,eCNAP/CANVAS,djbender/canvas-lms,narigone/canvas,shidao-fm/canvas-lms,nditech/red-innovadores-lms,Rvor/canvas-lms,ottenhoff/canvas-lms,usmschuck/canvas,roxolan/canvas-lms,instructure/canvas-lms,kyroskoh/canvas-lms,venturehive/canvas-lms,landonwilkins/canvas-lms,va7map/canvas-lms,instructure/canvas-lms,AndranikMarkosyan/lms,rup/Tarrax,va7map/canvas-lms,dgynn/canvas-lms,gbleydon/canvas-lms,arrivu/jigsaw-lms,antoniuslin/canvas-lms,ankithbti/canvas_lms,rup/Tarrax,arrivu/qibla-ecampus,instructure/canvas-lms,greyhwndz/canvas-lms,narigone/canvas,nditech/red-innovadores-lms,matematikk-mooc/canvas-lms,efrj/canvas-lms,AndranikMarkosyan/lms,gbleydon/canvas-lms,sfu/canvas-lms,HotChalk/canvas-lms,sli7246/canvas_branch,Rvor/canvas-lms,Jyaasa/canvas-lms,HotChalk/canvas-lms,sli7246/canvas_branch,Unow/canvas-lms,samuels410/greatlakes-lms,matematikk-mooc/canvas-lms