Zizmor: fix violations of "template-injection" #2037

Job	Run time
Checkout PDFium	3m 54s
Apply patches (ios, arm64, true)	15s
Apply patches (macos, arm64, false)	15s
Apply patches (android, arm64, true)	16s
Apply patches (android, arm64, false)	16s
Apply patches (win, arm64, true)	20s
Apply patches (macos, arm64, true)	15s
Apply patches (linux, mipsel)	15s
Apply patches (linux, ppc64)	20s
Apply patches (linux, mips64el)	16s
Apply patches (win, arm64, false)	21s
Apply patches (linux, arm64, true)	21s
Apply patches (emscripten, wasm)	17s
Apply patches (linux, arm64, false)	15s
Apply patches (ios, arm64, false)	20s
	7m 56s

Provide feedback