Change this code to not construct template content directly from user-controlled data.