{{ title }}
{%- for category, msg in get_flashed_messages(True) -%} {#- FIXME ensure all flash() messages are free of XSS vectors. In particular, check places where we flash error messages. -#}{{ msg | safe }}
{%- endfor -%} {%- block content %}{% endblock -%}