From: dominic sisneros <dom@...>
Date: 2004-07-26T13:26:42+09:00
Subject: Re: [ANN] Rails 0.5.0: The end of vaporware!

If you include ERB::Util then it includes html escape.  Use it in your
templates like this

<%h=  puts "Some text with <characters>" %>
On Jul 25, 2004, at 2:54 PM, David Heinemeier Hansson wrote:

>> Well, here's a quick hack that anyone could do in their code to make 
>> the autoescaping (and explicit non-escaping) possible:
>>
>> Not perfect, obviously, but it does work.
>
> That's kinda sexy. I'd certainly welcome a switch-on addition of that 
> to Action Pack. Perhaps something like:
>
>   ActionController::Base.auto_escape_template_prints = true
>
> Following the lines of existing switches, like:
>
>   ActionController::Base.view_controller_internals = true
>
> Cool stuff, Jamis!
> --
> David Heinemeier Hansson,
> http://www.rubyonrails.org/  -- Web-application framework for Ruby
> http://www.instiki.org/      -- A No-Step-Three Wiki in Ruby
> http://www.basecamphq.com/   -- Web-based Project Management
> http://www.loudthinking.com/ -- Broadcasting Brain
> http://www.nextangle.com/    -- Development & Consulting Services
>
>
>