Require active_support/core_ext/string/output_safety and use html_safe rather than use non-public SafeBuffer API.