Fix XSS in ?showTarget parameter
Remove use of '|safe' in templates in favor of mark_safe()