more robust escaping/html_safe-ing