diff --git a/templates/ktcore/folder/bulkUpload.smarty b/templates/ktcore/folder/bulkUpload.smarty
index 82cb813..1ed3ce6 100644
--- a/templates/ktcore/folder/bulkUpload.smarty
+++ b/templates/ktcore/folder/bulkUpload.smarty
@@ -12,9 +12,9 @@
 {capture assign=sJavascript}
 {literal}
 function swapInItem(elementId, req) {
-    
+
     var cp = getElement(elementId);
-    
+
     cp.innerHTML = req.responseText;
     initialiseConditionalFieldsets();
 }
@@ -28,8 +28,8 @@ function swapElementFromRequest(elementId, url) {
     var cp = getElement(elementId);
     cp.innerHTML=_("loading...");
     deff.addCallback(partial(swapInItem, elementId));
-    
-    
+
+
 }
 
 function getMetadataForType(id) {
@@ -54,7 +54,7 @@ addLoadEvent(startupMetadata);
 {/capture}
 {$context->oPage->requireJSStandalone($sJavascript)}
 
-<h2><img src="{if $config->get("ui/morphEnabled") == '1'}{$rootUrl}/skins/kts_{$config->get("ui/morphTo")}/title_bullet.png{else}{$rootUrl}/resources/graphics/title_bullet.png{/if}"/>{i18n}Upload files into{/i18n}:<br />{$context->oFolder->getName()}</h2>
+<h2><img src="{if $config->get("ui/morphEnabled") == '1'}{$rootUrl}/skins/kts_{$config->get("ui/morphTo")}/title_bullet.png{else}{$rootUrl}/resources/graphics/title_bullet.png{/if}"/>{i18n}Upload files into{/i18n}:<br />{$context->oFolder->getName()|sanitize}</h2>
 
 <form method="POST" action="{$smarty.server.PHP_SELF|addQueryString:"postExpected=1&fFolderId="}{$context->oFolder->getId()}" enctype="multipart/form-data">
 <fieldset><legend>{i18n}Bulk upload{/i18n}</legend>