- or download this
print $query->hidden('message');
- or download this
$escaped = $query->escapeHTML($message);
# ..
<input type="hidden" name="message" value="$escaped">
- or download this
<input type="hidden" name="message" value="[% $message | html %]">