Change update menu to an html template

This is done to avoid warnings about cross site scripting.