Removes unsafe use of `html_safe`.

Any user content (thus unknown) should not be `html_safe`'ed.

Fixes #30
Merge pull request #40 from 13k/unsafe-html_safe

Removes unsafe use of `html_safe`.