Output is not being escaped with Jinja2.escape.