Errors are now rendered with nunjucks which has escaping built in - plus this is still covered by a test see: https://github.com/mozilla/zippy/pull/53/files#diff-de14be821544f2f24e344005256880beR13