From ef2a8467e8037708b7eb0fad165237317bb1329f Mon Sep 17 00:00:00 2001
From: Rocky Duan <dementrock@gmail.com>
Date: Tue, 17 Jul 2012 17:00:36 -0400
Subject: [PATCH] fix potential <script> tag escape bug

---
 common/lib/xmodule/xmodule/seq_module.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/common/lib/xmodule/xmodule/seq_module.py b/common/lib/xmodule/xmodule/seq_module.py
index 9f00c3be87..b146a698a0 100644
--- a/common/lib/xmodule/xmodule/seq_module.py
+++ b/common/lib/xmodule/xmodule/seq_module.py
@@ -80,7 +80,8 @@ class SequenceModule(XModule):
         # Split </script> tags -- browsers handle this as end
         # of script, even if it occurs mid-string. Do this after json.dumps()ing
         # so that we can be sure of the quotations being used
-        params = {'items': json.dumps(contents).replace('</script>', '<"+"/script>'),
+        import re
+        params = {'items': re.sub(r'</(script)', r'\u003c/\1', json.dumps(contents), flags=re.IGNORECASE),
                   'element_id': self.location.html_id(),
                   'item_id': self.id,
                   'position': self.position,