Customizing  the #{error /} tag in FastTags._error so that the tag escapes HTML by default, but takes a "raw" argument
Merge branch 'feature/xss' into 1.2.x