In views.py you can see what the heading variable looks like.
Note: Escaping HTML characters is a default setting in Django, so we have to turn off autoescape in the example to see the difference.