use erb_safe_ext