Corrected example using variable type `template.HTML`

Added a variable for the `template.HTML` XSS example.
Merge pull request #20 from LarryBattle/patch-1

Corrected example using variable type `template.HTML`