Removes unsafe use of `html_safe`.

Any user content (thus unknown) should not be `html_safe`'ed.

Fixes #30