html_safe in upload file labels