should this use `mark_safe`?