fix unlikely self-XSS from your own package def names

1 files changed, 1 insertions, 1 deletions

diff --git a/httemplate/elements/selectlayers.html b/httemplate/elements/selectlayers.html
index cb1d2d619..785ee369e 100644
--- a/httemplate/elements/selectlayers.html
+++ b/httemplate/elements/selectlayers.html
@@ -121,7 +121,7 @@ Example:
 
         <OPTION VALUE="<% $option %>"
                 <% $option eq $selected ? ' SELECTED' : '' %>
-        ><% $options->{$option} %></OPTION>
+        ><% $options->{$option} |h %></OPTION>
 
 %     }