src.ejs was using auto-escaped code blocks