Remove SafeText from url so it can be escaped

Author: Providence-o

blog/models.py

@@ -74,7 +74,7 @@ def img(self, url, alt_text):
         CF = type(self)
         return {
             CF.REST: f".. image:: {url}\n   :alt: {alt_text}",
-            CF.HTML: format_html('<img src="{}" alt="{}">', url, alt_text),
+            CF.HTML: f'<img src="{url}" alt="{alt_text}">',
             CF.MARKDOWN: f"![{alt_text}]({url})",
         }[self]