Call the |escape modifier properly in this template.

htdocs/theme/default/templates/view/blocktypelist.tpl

@@ -6,10 +6,10 @@
         <div class="blocktype">
             {* The width and height are required so that the javascript that places the clones knows how
                big it should make itself. Talk to Nigel before changing this *}
-            <img src="{$blocktype.thumbnail_path | escape}" alt="{str tag='Preview' section='view'}" width="70" height="58">
-            <h3>{$blocktype.title | escape}</h3>
-            <p>{$blocktype.description | escape}</p>
-            <input type="{if $javascript}hidden{else}radio{/if}" class="blocktype-radio" name="blocktype" value="{$blocktype.name | escape}">
+            <img src="{$blocktype.thumbnail_path|escape}" alt="{str tag='Preview' section='view'}" width="70" height="58">
+            <h3>{$blocktype.title|escape}</h3>
+            <p>{$blocktype.description|escape}</p>
+            <input type="{if $javascript}hidden{else}radio{/if}" class="blocktype-radio" name="blocktype" value="{$blocktype.name|escape}">
         </div>
     </li>
 {/foreach}