Do we want `validates_with SafeHtmlValidator` here?