This probably leaves the template open for an injection attack?  Trying to figure out a way around this.

/cc @wjbuys