Fixed XSS from markdown()

spec/views/admin/lodgings/index.html.haml_spec.rb

@@ -9,4 +9,14 @@ describe 'admin/lodgings/index' do
     render
     expect(rendered).to include(CGI.escapeHTML(@conference.lodgings.first.name))
   end
+
+  it 'prevents XSS in lodging description' do
+    @conference = create(:conference)
+    @conference.venue = create(:venue)
+    @conference.lodgings << create(:lodging_xss)
+    assign :venue, @conference.venue
+    render
+    expect(rendered).to_not have_selector("#divInjectedElement")
+  end
+
 end