class String

def html_safe

this method. It should never be called on user input.
`raw` helper in views. It is recommended that you use `sanitize` instead of
string contains no malicious content. This method is equivalent to the
additional escaping performed. It is your responsibility to ensure that the
Marks a string as trusted safe. It will be inserted into HTML with no
def html_safe
  ActiveSupport::SafeBuffer.new(self)
end