added compatibility with the 'rails_xss' gem ('+' is html_safe aware, 'join' is not)