Rails_xss Plugin
I installed the rails_xss plugin, for the main purpose of seeing what will break with Rails 3.0 (where the behaviour of the plugin is the default). I think I've fixed everything, but let me know if you see stuff that is HTML-escaped, which shouldn't be. As a side benefit, we now use Erubis, rather than ERB, to render templates. They tell me it's faster ...
This commit is contained in:
parent
d6be09e0f0
commit
a5e08f7bcc
343 changed files with 43874 additions and 37 deletions
|
@ -1,5 +1,5 @@
|
|||
<%-
|
||||
@title = "Editing #{@page.name.escapeHTML}"
|
||||
@title = "Editing #{@page.name.escapeHTML}".html_safe
|
||||
@content_width = 720
|
||||
@hide_navigation = true
|
||||
-%>
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue