'When an unsupported method response is generated, an HTML message will
be displayed.  That message should include a quoted form of the URI and,
since that value come from a browser and shouldn\'t necessarily be
trusted.'

def test_notAllowedQuoting(self):

    req = self._getReq()
    req.requestReceived('POST', '/gettableresource?value=<script>bad', 'HTTP/1.0')
    self.assertEqual(req.code, 405)
    renderedPage = req.transport.written.getvalue()
    self.assertNotIn('<script>bad', renderedPage)
    self.assertIn('&lt;script&gt;bad', renderedPage)
