Couldn't this `mark_safe` lead to an XSS?