On 09 Aug 2010, at 13:54, Erwin wrote:
this is my first Rails3-Ruby 1.9.2 test app.. I cannot out a simple html string w special characters like © copyright = "Copyright © " + " 2010 , TestApp Ltd." using copyright in my view, I see displayed Copyright © 2010, TestApp Ltd. what's wrong ? what's missing somewhere (was running well in Rails 2.3-Ruby 1..8.7 )
HTML escaping is done by default in Rails 3: http://asciicasts.com/episodes/204-xss-protection-in-rails-3 http://www.railsdispatch.com/posts/security http://yehudakatz.com/2010/02/01/safebuffers-and-rails-3-0/ The solution in is the posts above. Best regards Peter De Berdt -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-t...@googlegroups.com. To unsubscribe from this group, send email to rubyonrails-talk+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en.