Rails_xss Plugin

I installed the rails_xss plugin, for
the main purpose of seeing what will
break with Rails 3.0 (where the behaviour
of the plugin is the default). I think
I've fixed everything, but let me know if you
see stuff that is HTML-escaped, which
shouldn't be.

As a side benefit, we now use Erubis,
rather than ERB, to render templates.
They tell me it's faster ...

vendor/plugins/erubis-2.6.5/examples/basic/example.ephp

@@ -0,0 +1,17 @@
+<%
+   $user = "World";
+   $list = array('<aaa>', 'b&b', '"ccc"');
+%>
+<p>Hello <%= $user %>!</p>
+<table>
+  <tbody>
+    <% $i = 0 %>
+    <% foreach ($list as $item) { %>
+    <%   $i++; %>
+    <tr bgcolor="<%= $i % 2 == 0 ? '#FFCCCC' : '#CCCCFF' %>">
+      <td><%= $i %></td>
+      <td><%== $item %></td>
+    </tr>
+    <% } %>
+  </tbody>
+</table>