fixed tempalte string tag for safe html