- <input type="hidden" name="co_street" value="<TMPL_VAR co_street>">
- <input type="hidden" name="co_city" value="<TMPL_VAR co_city>">
- <input type="hidden" name="login" value="<TMPL_VAR login>">
- <input type="hidden" name="password" value="<TMPL_VAR password>">
+ <input type="hidden" name="co_street" value="[% HTML.escape(co_street) %]">
+ <input type="hidden" name="co_city" value="[% HTML.escape(co_city) %]">