From: Brian Candler <b.candler@...>
Date: 2009-11-17T19:29:24+09:00
Subject: Re: What is the difference between the two following pieces of c

Doney Kaka wrote:
> Don't really know where to go with this one, but I gotta know...
> What is the difference between the two following pieces of code?
> Code:
> <%= h(truncate(product.description, 80)) %>
> and
> Code:
> <%= truncate(product.description, 80) %>

Ruby is not Rails, and Rails questions are best asked on a Rails mailing 
list.

But briefly: Rails defines a helper method escapeHTML() with alias h(). 
This escapes HTML, so for example if the product.description is "a<b" it 
turns it into "a&lt;b". This is important to prevent users injecting 
their own tags and code into the page, as well as ensuring the page 
renders properly.
-- 
Posted via http://www.ruby-forum.com/.