Merge pull request #383 from microsoft/alert-autofix-13

Potential fix for code scanning alert no. 13: Double escaping or unescaping

Author: WirelessLife

archive/Educator Resources/Course Content/Module2/code/lesson2/escape.js

@@ -24,11 +24,11 @@ module.exports = function(ops){
 
   unescape: function(html) {
     return String(html)
-      .replace(/&/g, '&')
       .replace(/"/g, '"')
       .replace(/'/g, "'")
       .replace(/&lt;/g, '<')
-      .replace(/&gt;/g, '>');
+      .replace(/&gt;/g, '>')
+      .replace(/&amp;/g, '&');
   }
  }
 };