On 09 Aug 2010, at 13:54, Erwin wrote:

this is my first Rails3-Ruby 1.9.2 test app..
I cannot out a simple html string w special characters like ©

copyright = "Copyright © " + " 2010 , TestApp Ltd."

using copyright in my view, I see displayed

Copyright © 2010, TestApp Ltd.

what's wrong ? what's missing somewhere  (was running well in Rails
2.3-Ruby 1..8.7 )


HTML escaping is done by default in Rails 3:

http://asciicasts.com/episodes/204-xss-protection-in-rails-3
http://www.railsdispatch.com/posts/security
http://yehudakatz.com/2010/02/01/safebuffers-and-rails-3-0/

The solution in is the posts above.


Best regards

Peter De Berdt

--
You received this message because you are subscribed to the Google Groups "Ruby on 
Rails: Talk" group.
To post to this group, send email to rubyonrails-t...@googlegroups.com.
To unsubscribe from this group, send email to 
rubyonrails-talk+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-talk?hl=en.

Reply via email to