Still vulnerable to SELF-XSS #472

This creates a self-XSS condition where JavaScript executes only in the context of the
user actively editing their own template. The security impact is minimal as the vulnerability
cannot be weaponized to attack other users, and the properly implemented output
encoding prevents the malicious content from affecting anyone viewing or receiving the
final templates. However, self-XSS vulnerabilities can occasionally be leveraged
through social engineering attacks, where users are tricked into pasting malicious
content into the editor, potentially exposing their own session tokens or
performing unintended actions.