From: "Robert D. La Gesse" <rob@...>
Date: 2006-03-17T02:13:47+09:00
Subject: Re: ERB question

Markus Werner wrote:
> Robert D. La Gesse wrote:
>> Can anyone tell me what the difference is in these two statements?  Yes,
>> I'm a newbie!
>>
>> <%=h device.send(column.name) %>
>>
>> <%= device.send(column.name) %>
>>
>> Specifically, what is the <%=h supposed to do?  The "h" doesn't appear
>> to do anything that I can find, yet RoR generates code using it...
>>
>> Thanks much!
>>
>> Rob
> 
> h is a short form for is a short form for the method html_escape.
> 
> So IMHO it's more clear to write something like
> <%= h(device.send(column.name)) %>
> 
> 
> cu
> 
> polarix
> 
OK, I guess that's clear enough... but it doesn't actually seem to make 
any difference if the "h" is in there or not.  And I can't seem to 
determine why Ruby on Rails sometimes generates code with the "h", and 
sometimes it doesn't :)

Thank,

Rob