markupsafe_xss: allowed_calls: - _MarkTrustedValue