Fixed bug #15887: XSS in template analyzer (thanks to Georg Ringer)