add handlebar style templating to xss tests