Test popular template engine's abililty against XSS