Use str(s) instead of s.unescape() to add support for escaping things inside. (took me a while to find that str() worked)
Use a basic escaping html template for viewing pastes