[%- USE HTML %]
 <input type="hidden" name="callback" value="[% HTML.escape(callback) %]">
</form>