Fix HTML escape, we don't have access to ERB::Util in controller.