Sinatra doesn’t know this ditty.

Try this:

get '/user/A<h1>HI</h1>' do
  "Hello World"
end