Currently `flask.Markup` is used to make embedding a string in html safe. This could also be done in jinja and we could drop the flask dependency.