@Test
public void escapeHtml() {

    String badString = "<script>alert('XSS');</script>";
    String escapedString = StringHelper.escapeHtml(badString);
    // System.out.println("badString: " + badString);
    // System.out.println("escapedString: " + escapedString);
    assertTrue(escapedString.indexOf("<script>") == -1);
    assertTrue(escapedString.indexOf("&lt") != -1);
}