try reading on html safe feature of rails 3

On Thu, Sep 9, 2010 at 2:00 PM, Frederick Cheung <frederick.che...@gmail.com
> wrote:

>
>
> On Sep 9, 4:34 pm, Jamal Soueidan <li...@ruby-forum.com> wrote:
> > Hello,
> >
> > Is there any configuration in Rails 3 since it destroy my HTML when i
> > try to print something out ?
> >
> > Example:
> >
> > <%= navigation [{:users => admin_users_path}] %>
> >
> > <ul class="navigation">
> > &lt;li class=&quot;&quot;&gt;&lt;a
> > href=&quot;/admin/users&quot;&gt;users&lt;/a&gt;&lt;/li&gt;
> > </ul>
> >
> > I have taken those from view source, why is this happening in Rails 3?
> >
>
> Sounds like you should read about the xss protection that is in rails
> 3 (and rails 2.3.6 if my memory is correct) - rails knows about
> strings that should be escaped and strings that shouldn't, if you
> write your own view helpers you occasionally need to tell rails that a
> string is safe so that it doesn't escape it for you
>
>
> Fred
>
> > I'm missing something out?
> >
> > Thanks.
> > --
> > Posted viahttp://www.ruby-forum.com/.
>
> --
> You received this message because you are subscribed to the Google Groups
> "Ruby on Rails: Talk" group.
> To post to this group, send email to rubyonrails-t...@googlegroups.com.
> To unsubscribe from this group, send email to
> rubyonrails-talk+unsubscr...@googlegroups.com<rubyonrails-talk%2bunsubscr...@googlegroups.com>
> .
> For more options, visit this group at
> http://groups.google.com/group/rubyonrails-talk?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Talk" group.
To post to this group, send email to rubyonrails-t...@googlegroups.com.
To unsubscribe from this group, send email to 
rubyonrails-talk+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-talk?hl=en.

Reply via email to