public static String errorPage(int code, String message) {
        return Holder.INSTANCE.replaceAll(buildRegex("status_code"), valueOf(code))
                .replaceAll(buildRegex("error_message"), StringEscapeUtils.escapeHtml4(message));
    }
@Test
    public void shouldEscapeHtmlInMessages() {
        String htmlInMessage = "<img src=\"blah\"/>";
        assertThat(errorPage(404, htmlInMessage))
                .doesNotContain(htmlInMessage)
                .contains("<h2>&lt;img src=&quot;blah&quot;/&gt;</h2>");
    }