As for No. 2, there is a poorly documented function called mark_safe that you can use. For example, in the custom form field that I wrote, I need to return an HTML code string for the label_from_instance method, so I return using mark_safe:
return mark_safe( '<span class="foo">Some HTML output</span>' )
source share