I am a bit surprised: mark_safe is already called on the inner html here.