Don't interpolate unescaped strings with the call tag.
Merge pull request #9 from SheepDogInc/xss-protection

Don't interpolate unescaped strings with the call tag.