Well, all string for template output is XSS safe now.