Ok, I haven't found anything about how bootsy might escape their input, but then I would suggest to use escape_javascript around '@chair.description.html_safe'  so the html should get rendered, while javascript will not be executed.