[multiple] using safestr in web.form.Dropdown._render_option