Fixed XSS in template.