No need for explicit h() escaping in new code