html_safe for messages when adding REST endpoint parameters.