Ticket #6097: 6097.diff

docs/templates.txt

@@ -340 +340 @@
 Clearly, user-submitted data shouldn't be trusted blindly and inserted directly
 into your Web pages, because a malicious user could use this kind of hole to
 do potentially bad things. This type of security exploit is called a
-Cross Site Scripting`_ (XSS) attack.
+`Cross Site Scripting`_ (XSS) attack.
 
+.. _Cross Site Scripting: http://en.wikipedia.org/wiki/Cross-site_scripting
+
 To avoid this problem, you have two options:
 
     * One, you can make sure to run each untrusted variable through the