instiki/vendor/plugins/erubis/test/data/users-guide/escape_example.result

$ erubis -xE Escape example.eruby
_buf = ''; _buf << '<div>
'; for item in list 
 _buf << '  <p>'; _buf << Erubis::XmlHelper.escape_xml( item ); _buf << '</p>
  <p>'; _buf << ( item ).to_s; _buf << '</p>
'; end 
 _buf << '</div>
';
_buf.to_s
Rails_xss Plugin I installed the rails_xss plugin, for the main purpose of seeing what will break with Rails 3.0 (where the behaviour of the plugin is the default). I think I've fixed everything, but let me know if you see stuff that is HTML-escaped, which shouldn't be. As a side benefit, we now use Erubis, rather than ERB, to render templates. They tell me it's faster ... 2010-05-26 07:27:49 +02:00			`$ erubis -xE Escape example.eruby`
			`_buf = ''; _buf << '<div>`
			`'; for item in list`
			`_buf << ' <p>'; _buf << Erubis::XmlHelper.escape_xml( item ); _buf << '</p>`
			`<p>'; _buf << ( item ).to_s; _buf << '</p>`
			`'; end`
			`_buf << '</div>`
			`';`
			`_buf.to_s`