placing html_safe to script variables and verifying its safter with html_safe?