a5e08f7bcc
I installed the rails_xss plugin, for the main purpose of seeing what will break with Rails 3.0 (where the behaviour of the plugin is the default). I think I've fixed everything, but let me know if you see stuff that is HTML-escaped, which shouldn't be. As a side benefit, we now use Erubis, rather than ERB, to render templates. They tell me it's faster ...
21 lines
451 B
Plaintext
21 lines
451 B
Plaintext
$ erubis -l perl example.eperl
|
|
use HTML::Entities;
|
|
my $user = 'Erubis';
|
|
my @list = ('<aaa>', 'b&b', '"ccc"');
|
|
|
|
print('<html>
|
|
<body>
|
|
<p>Hello '); print($user); print('!</p>
|
|
<table>
|
|
'); $i = 0;
|
|
for $item (@list) {
|
|
print(' <tr bgcolor='); print(++$i % 2 == 0 ? '#FFCCCC' : '#CCCCFF'); print('">
|
|
<td>'); print($i); print('</td>
|
|
<td>'); print($item); print('</td>
|
|
</tr>
|
|
'); }
|
|
print(' </table>
|
|
</body>
|
|
</html>
|
|
');
|