explicitly mark a string as safe HTML with |safe