Use safe_join instead of <%==

Using `<%==` is the same as using `raw`, and here we only want to mark
as safe a `<br>` tag.

app/helpers/proposals_dashboard_helper.rb

@@ -65,7 +65,7 @@ module ProposalsDashboardHelper
                 supports: number_with_delimiter(resource.required_supports,
                 delimiter: ".")) if resource.required_supports > 0
 
-    label.join(" #{t("dashboard.resource.and")}<br>")
+    safe_join label, h(" #{t("dashboard.resource.and")})") + tag(:br)
   end
 
   def daily_selected_class

app/views/dashboard/_resource.html.erb

@@ -23,7 +23,7 @@
                     class: "button expanded" %>
       <% else %>
         <strong>
-          <%== resource_availability_label(resource) %>
+          <%= resource_availability_label(resource) %>
         </strong>
       <% end %>
     </div>