- <th align="right" nowrap>Name des Anhangs</th>
- <td><input name="attachment_filename" size="30" value="<TMPL_VAR a_filename>"></td>
+ <th align="right" nowrap>[% 'Attachment name' | $T8 %]</th>
+ <td><input name="attachment_filename" size="30" value="[% HTML.escape(a_filename) %]"></td>