I think is better to call html_safe here since `SafeBuffer` is not public API