Enable Jinja2 autoescape

* also remove 'safe' filter in tooltip descriptions until
  we integrate tag/attribute whitelisting