Eliminates tooltip XSS
Eliminates tooltip XSS

fixes CNVS-17449

Test plan:
* Create a section with the name "<script>alert('xss section')</script>"
* Create a student who has the name "<script>alert('student name')</script>"
  and assign them to the section you made
* As a teacher, go to the Groups page, select a group and hover over a
  the malicious student's name
* There are three tooltips that come up when hovering over a student in
  the list of students. Make sure that none of them trigger an alert

Change-Id: I717b06cd510e91b8251ee2280b290b6422e5d29f
Reviewed-on: https://gerrit.instructure.com/45901
Tested-by: Jenkins <d95b56ce41a2e1ac4cecdd398defd7414407cc08@instructure.com>
Reviewed-by: Mark Severson <cdf1f90aee9d0d073a2a24141ebc71887f3ba533@instructure.com>
Reviewed-by: Brad Horrocks <7b5c5d1f2eba6c540b8e53f17d87a9bd7dbf604b@instructure.com>
QA-Review: Derek Hansen <cb1116771307a93b98b6babf698410ed3846296d@instructure.com>
Product-Review: Matt Fairbourn <5f353e1c97bb9cc046b9db20beca0b9392f6f1b2@instructure.com>

fronteerio/canvas-lms,juoni/canvas-lms,utkarshx/canvas-lms,redconfetti/canvas-lms,samuels410/greatlakes-lms,sfu/canvas-lms,instructure/canvas-lms,tgroshon/canvas-lms,Rvor/canvas-lms,djbender/canvas-lms,va7map/canvas-lms,snehakachroo1/LSI_replica,samuels410/greatlakes-lms,matematikk-mooc/canvas-lms,samuels410/greatlakes-lms,eCNAP/CANVAS,efrj/canvas-lms,matematikk-mooc/canvas-lms,antoniuslin/canvas-lms,narigone/canvas,Rvor/canvas-lms,va7map/canvas-lms,matematikk-mooc/canvas-lms,sdeleon28/canvas-lms,fronteerio/canvas-lms,va7map/canvas-lms,Jyaasa/canvas-lms,ShreniiNepal/shrenii_lmp,grahamb/canvas-lms,ShreniiNepal/shrenii_lmp,AndranikMarkosyan/lms,AndranikMarkosyan/lms,roxolan/canvas-lms,greyhwndz/canvas-lms,whalejasmine/canvas-lms,shidao-fm/canvas-lms,sfu/canvas-lms,wrdsb/canvas-lms,kyroskoh/canvas-lms,samuels410/greatlakes-lms,leftplusrightllc/canvas-lms,SwinburneOnline/canvas-lms,sdeleon28/canvas-lms,Rvor/canvas-lms,eCNAP/CANVAS,instructure/canvas-lms,redconfetti/canvas-lms,roxolan/canvas-lms,eCNAP/CANVAS,utkarshx/canvas-lms,leftplusrightllc/canvas-lms,utkarshx/canvas-lms,instructure/canvas-lms,kyroskoh/canvas-lms,fronteerio/canvas-lms,eCNAP/CANVAS,juoni/canvas-lms,sfu/canvas-lms,ShreniiNepal/shrenii_lmp,instructure/canvas-lms,shidao-fm/canvas-lms,grahamb/canvas-lms,djbender/canvas-lms,antoniuslin/canvas-lms,efrj/canvas-lms,AndranikMarkosyan/lms,SwinburneOnline/canvas-lms,narigone/canvas,roxolan/canvas-lms,Jyaasa/canvas-lms,djbender/canvas-lms,greyhwndz/canvas-lms,sfu/canvas-lms,kyroskoh/canvas-lms,jay3126/canvas-lms,whalejasmine/canvas-lms,HotChalk/canvas-lms,whalejasmine/canvas-lms,shidao-fm/canvas-lms,sfu/canvas-lms,matematikk-mooc/canvas-lms,instructure/canvas-lms,jay3126/canvas-lms,sfu/canvas-lms,tgroshon/canvas-lms,jay3126/canvas-lms,snehakachroo1/LSI_replica,leftplusrightllc/canvas-lms,greyhwndz/canvas-lms,redconfetti/canvas-lms,HotChalk/canvas-lms,venturehive/canvas-lms,venturehive/canvas-lms,kyroskoh/canvas-lms,leftplusrightllc/canvas-lms,dgynn/canvas-lms,ShreniiNepal/shrenii_lmp,skmezanul/canvas-lms,juoni/canvas-lms,grahamb/canvas-lms,roxolan/canvas-lms,grahamb/canvas-lms,sdeleon28/canvas-lms,venturehive/canvas-lms,Jyaasa/canvas-lms,dgynn/canvas-lms,fronteerio/canvas-lms,efrj/canvas-lms,HotChalk/canvas-lms,antoniuslin/canvas-lms,whalejasmine/canvas-lms,efrj/canvas-lms,utkarshx/canvas-lms,skmezanul/canvas-lms,jay3126/canvas-lms,snehakachroo1/LSI_replica,venturehive/canvas-lms,wrdsb/canvas-lms,tgroshon/canvas-lms,SwinburneOnline/canvas-lms,juoni/canvas-lms,Jyaasa/canvas-lms,djbender/canvas-lms,skmezanul/canvas-lms,redconfetti/canvas-lms,dgynn/canvas-lms,tgroshon/canvas-lms,grahamb/canvas-lms,wrdsb/canvas-lms,HotChalk/canvas-lms,sdeleon28/canvas-lms,narigone/canvas,greyhwndz/canvas-lms,Rvor/canvas-lms,SwinburneOnline/canvas-lms,antoniuslin/canvas-lms,va7map/canvas-lms,skmezanul/canvas-lms,sfu/canvas-lms,AndranikMarkosyan/lms,wrdsb/canvas-lms,snehakachroo1/LSI_replica,shidao-fm/canvas-lms,dgynn/canvas-lms,narigone/canvas,instructure/canvas-lms,instructure/canvas-lms