Aren't all things html_safe by default in newer Rails?