'Test that course display names are correctly HTML-escaped.'

def test_survey_xss(self):

    response = self.client.get(reverse('course_survey', kwargs={'course_id': unicode(self.course.id)}))
    self.assert_no_xss(response, '<script>alert("XSS")</script>')
