use safe_join instead of join().html_safe