cgi_error_no_template(): Encode the template name to prevent XSS