HTML-escape for user input when generating user output via templates