htmlSafe

controllers.application\.js

import Controller from '@ember/controller';
import { htmlSafe } from '@ember/template';

export default class ApplicationController extends Controller {
  appName = 'Ember Twiddle';

  get foo() {
    return htmlSafe('<strike>some</strike>String<script type="text/javascript">(console.log("bar"))();</' + 'script>')
  }

}

templates.application\.hbs

<h1>Welcome to {{this.appName}}</h1>
<br>
<br>
{{foo}}
<br>
<br>

twiddle\.json

{
  "version": "0.17.0",
  "EmberENV": {
    "FEATURES": {},
    "_TEMPLATE_ONLY_GLIMMER_COMPONENTS": false,
    "_APPLICATION_TEMPLATE_WRAPPER": true,
    "_JQUERY_INTEGRATION": true
  },
  "options": {
    "use_pods": false,
    "enable-testing": false
  },
  "dependencies": {
    "jquery": "https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.js",
    "ember": "3.17.0",
    "ember-template-compiler": "3.17.0",
    "ember-testing": "3.17.0"
  },
  "addons": {
    "@glimmer/component": "1.0.0"
  }
}