Fixed security exploit.

Fixed security exploit in the template API where blade syntax codes can
be ran in entity parameters.