Rails_xss Plugin
I installed the rails_xss plugin, for the main purpose of seeing what will break with Rails 3.0 (where the behaviour of the plugin is the default). I think I've fixed everything, but let me know if you see stuff that is HTML-escaped, which shouldn't be. As a side benefit, we now use Erubis, rather than ERB, to render templates. They tell me it's faster ...
This commit is contained in:
parent
d6be09e0f0
commit
a5e08f7bcc
343 changed files with 43874 additions and 37 deletions
7
vendor/plugins/rails_xss/init.rb
vendored
Normal file
7
vendor/plugins/rails_xss/init.rb
vendored
Normal file
|
@ -0,0 +1,7 @@
|
|||
unless $gems_rake_task
|
||||
if Rails.version <= "2.3.7"
|
||||
$stderr.puts "rails_xss requires Rails 2.3.8 or later. Please upgrade to enable automatic HTML safety."
|
||||
else
|
||||
require 'rails_xss'
|
||||
end
|
||||
end
|
Loading…
Add table
Add a link
Reference in a new issue