[Zope] making a string html safe