I see this was just moved from somewhere else, but caught my eye. Should use `django.utils.html.format_html` instead (takes care of the case where `slug` itself has characters that need to be escaped).