fix: harden CMS security controls

cms/templates/another-example-template.html

@@ -1,26 +1,24 @@
 <!DOCTYPE html>
-<html lang="en">
+<html lang="en-gb">
 <head>
+    <!-- A repeatable-content starter template for listings, teams, services, and similar pages. -->
     <meta charset="UTF-8">
-    <title>Welcome to NeoCMS</title>
-    <link href="/cms/css/welcome.style.css" rel="stylesheet">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <title>New NeoCMS Listing</title>
+    <meta name="description" content="Describe this listing for visitors and search engines.">
 </head>
 <body>
-<header>
-    <img alt="Application Logo" class="logo" src="/cms/img/welcomeLogo.png">
+<header class="editable">
+    <h1>New listing</h1>
+    <p>Edit this introduction, then duplicate the example item below as required.</p>
 </header>
+
 <main>
-    <h1>Welcome to NeoCMS</h1>
-    <p>This is another example template, found in /cms/templates/ - remove me and replace me with your own site
-        templates!</p>
-    <p class="editable">
-        This box is editable!<br/>
-        Lorem ipsum dolor sit amet, consectetur adipiscing elit.
-        Quisque sit amet accumsan tortor. Itaque earum rerum hic tenetur a sapiente delectus.
-    </p>
+    <!-- neo-dupe adds clone-before, clone-after, and delete controls in the CMS preview. -->
+    <article class="editable neo-dupe">
+        <h2>Example item</h2>
+        <p>Replace this content or duplicate the complete item.</p>
+    </article>
 </main>
-<footer>
-    <p>&copy; 2024 Andy Dixon</p>
-</footer>
 </body>
-</html>
+</html>