It's probably code in the module itself, and likely in the confirmation() function, since that's what prepares the content which is eventually requested and displayed by the template.