Mark as safe HTML: safe
The safe filter marks a string as safe HTML. Some template engines escape HTML characters automatically, and safe text is skipped.
Home Assistant doesn’t escape template output. Characters like < and > stay as they are, with or without safe. So when you output text directly, safe doesn’t change it. You can include HTML markup, such as bold text or line breaks, without it.
safe matters when something later in the template treats safe text differently. The following cases are the most common:
- The
escapefilter leaves safe text unchanged. For example,{{ '<b>x</b>' | escape }}escapes the tags, but{{ '<b>x</b>' | safe | escape }}keeps them. - When you join safe text with other text using
+, the other text is escaped. For example,{{ ('<b>' | safe) + '<i>' }}gives<b><i>. - The
xmlattrfilter doesn’t escape safe text in attribute values.
Usage
Here’s how to use this template function. Copy any example and adjust it to your setup.
{{ "<b>Important</b> message" | safe }}
<b>Important</b> message
Function signature
The signature is a technical summary of this template function. It shows the name of the function, the values (called parameters) it accepts, and what type of data each parameter expects (for example, a piece of text or a number).
Function parameters that have a = with a value after them are optional. If you leave them out, the default value shown is used automatically.
Function parameters without a = are usually required. A few optional parameters have no default value, so the signature shows them without a = as well. To check whether a parameter is required, look at the parameter list below the signature. Each parameter is marked as Required or Optional.
The most common optional parameter without a default value is default. The default parameter sets the value a function returns when the function can’t produce a result, for example, when float gets text that isn’t a number. If you leave out default, there is no fallback value, so most functions raise an error and the template fails. The parameter list of each function says what happens. If you set default, the function returns your value instead.
How to read a signature
Here is the signature of the round filter as an example:
round(
value: Any,
precision: int = 0,
method: str = "common",
default: Any,
) -> float | int | Any
-
roundis the name of the function. - Between the parentheses are the parameters. Each parameter has a name, followed by a colon and the type of value the parameter expects. The type only tells you what kind of value to pass. For
default: Any, you pass a value of any type, such as0or"unknown", not the wordAny. -
= 0and= "common"are default values. You can leave outprecisionandmethod, androunduses these default values. -
defaulthas no=, but the parameter list marksdefaultas optional. If you leave outdefaultandroundgets a value that isn’t a number,roundraises an error. -
->shows the type of value the function returns. - Inside a signature,
|means “or”. This function returns a decimal number, a whole number, or the value you passed asdefault.
round is a filter, so the first parameter, value, is the value before the |. For example, {{ 3.14159 | round(2) }} returns 3.14.
The types you’ll see most often:
-
str: text, such as"hello" -
int: a whole number, such as5 -
float: a decimal number, such as3.14 -
bool:trueorfalse -
list: a list of values, such as[1, 2, 3].list[str]is a list of texts. -
dict: a set of keys and values, such as{"name": "Kitchen"} -
datetimeandtimedelta: a date and time, and a duration. For details, refer to Dates and times. -
None: no value -
Any: any type of value
Some signatures use special forms:
-
*argsmeans you can pass any number of values, separated by commas. For example,average(1, 2, 3). -
value | name(...)means the function is a filter. The value before the|is passed to the filter as its first parameter. Some filter signatures, like theroundexample, show this value as the first parameter between the parentheses instead.
safe(
value: str,
) -> str
Function parameters
The following parameters can be provided to this function.
Good to know
- Home Assistant doesn’t escape template output. When you output text directly, the result is the same with or without
safe. Later filters and operations, such asescape,xmlattr, or joining text with+, can treat safe text differently. - Use
forceescapedownstream to re-escape a value that was marked safe.
Try it yourself
Ready to test this? Open Settings > Tools > Template, paste the example into the Template editor, and watch the result update on the right. Edit the values to see how the function adapts to your own entitiesAn entity represents a sensor, actor, or function in Home Assistant. Entities are used to monitor physical properties or to control other entities. An entity is usually part of a device or a service. [Learn more].
More examples
Real scenarios where this function comes up in automations and templates. Copy any example and adapt it to your setup.
Include HTML formatting in a notification
Mark a string as safe to include bold text in an HTML notification. The output is the same without safe.
{{
("<b>Alert:</b> Motion detected in the "
~ states("sensor.last_motion_room")) | safe
}}
<b>Alert:</b> Motion detected in the living room
Add a line break in output
Include an HTML line break in your template output. The output is the same without safe.
{{ ("Temperature: 22°C<br>Humidity: 65%") | safe }}
Temperature: 22°C<br>Humidity: 65%
Still stuck?
The Home Assistant community is quick to help: join Discord for real-time chat, post on the community forum with your template and expected result, or share on our subreddit /r/homeassistant.
AI assistants like ChatGPT or Claude can also explain or fix templates when you describe what you want in plain language.
Related template functions
These functions work well alongside this one:
-
Escape HTML characters: escape - Escapes HTML special characters in a string so they display as literal text.
-
Force-escape HTML characters: forceescape - Escapes HTML special characters, even on strings already marked as safe.
-
Strip HTML tags: striptags - Removes all HTML/XML tags from a string, leaving only the text content.