each loop, making cDocumentTemplate html_quote only the first dtml-var,
if at all.

This may expose more bugs in the dtml-var tainting.  I'm not to blame. ;-)