{%- if config.server_name -%} {%- endif -%}

{{ title }}

{%- for category, msg in get_flashed_messages(True) -%} {#- FIXME ensure all flash() messages are free of XSS vectors. In particular, check places where we flash error messages. -#}

{{ msg | safe }}

{%- endfor -%} {%- block content %}{% endblock -%}