Fixes #7483 - Use hidden input value to hold raw template contents (CVE-2014-3653)