Merge pull request #3760 from overleaf/jpa-xss-5

[views] mitigate Angular XSS on new project from template POST gateway

GitOrigin-RevId: a19de060cad0baf2822d1b6df419bbe1a2361ea4

services/web/app/views/project/editor/new_from_template.pug

@@ -13,7 +13,7 @@ block content
         span.loading-screen-ellip .
         span.loading-screen-ellip .
 
-  form(id='create_form' method='POST' action='/project/new/template/')
+  form(id='create_form' method='POST' action='/project/new/template/' ng-non-bindable)
     input(type="hidden", name="_csrf", value=csrfToken)
     input(type="hidden" name="templateId" value=templateId)
     input(type="hidden" name="templateVersionId" value=templateVersionId)