anticipating autoescape being defaulted to true