A utility method for escaping HTML tag characters. This method is also aliased as h.
In your ERb templates, use this method to escape any unsafe content. For example:
<%=h @person.name %>
puts html_escape("is a > 0 & a < 10?") # => is a > 0 & a < 10?
# File lib/active_support/core_ext/string/output_safety.rb, line 18 def html_escape(s) s = s.to_s if s.html_safe? s else s.gsub(/[&"><]/) { |special| HTML_ESCAPE[special] }.html_safe end end
A utility method for escaping HTML entities in JSON strings. This method is also aliased as j.
In your ERb templates, use this method to escape any HTML entities:
<%=j @person.to_json %>
puts json_escape("is a > 0 & a < 10?") # => is a \u003E 0 \u0026 a \u003C 10?
# File lib/active_support/core_ext/string/output_safety.rb, line 44 def json_escape(s) s.to_s.gsub(/[&"><]/) { |special| JSON_ESCAPE[special] } end
Generated with the Darkfish Rdoc Generator 2.