from cgi import escape def main(request, response): label = request.GET.first('label') return """""" % escape(label)