add html_safe to prevent escaping