fix unlikely self-XSS from your own package def names

diff --git a/httemplate/elements/selectlayers.html b/httemplate/elements/selectlayers.html
index cb1d2d6..785ee36 100644 (file)
--- a/httemplate/elements/selectlayers.html
+++ b/httemplate/elements/selectlayers.html
@@ -121,7 +121,7 @@ Example:
 
         <OPTION VALUE="<% $option %>"
                 <% $option eq $selected ? ' SELECTED' : '' %>
-        ><% $options->{$option} %></OPTION>
+        ><% $options->{$option} |h %></OPTION>
 
 %     }