Added a escape to city label in template.
Merge pull request #19 from tonyseek/hotfix/city-xss

Add a escape to city label in template.