a5e08f7bcc
I installed the rails_xss plugin, for the main purpose of seeing what will break with Rails 3.0 (where the behaviour of the plugin is the default). I think I've fixed everything, but let me know if you see stuff that is HTML-escaped, which shouldn't be. As a side benefit, we now use Erubis, rather than ERB, to render templates. They tell me it's faster ...
39 lines
675 B
Plaintext
39 lines
675 B
Plaintext
$ ruby fasteruby.rb
|
|
---------- script source ---
|
|
_buf = ''; _buf << %Q`<html>
|
|
<body>
|
|
<h1>#{Erubis::XmlHelper.escape_xml( @title )}</h1>
|
|
<table>\n`
|
|
i = 0
|
|
for item in @list
|
|
i += 1
|
|
_buf << %Q` <tr>
|
|
<td>#{ i }</td>
|
|
<td>#{Erubis::XmlHelper.escape_xml( item )}</td>
|
|
</tr>\n`
|
|
end
|
|
_buf << %Q` </table>
|
|
</body>
|
|
</html>\n`
|
|
_buf.to_s
|
|
---------- result ----------
|
|
<html>
|
|
<body>
|
|
<h1>Example</h1>
|
|
<table>
|
|
<tr>
|
|
<td>1</td>
|
|
<td>aaa</td>
|
|
</tr>
|
|
<tr>
|
|
<td>2</td>
|
|
<td>bbb</td>
|
|
</tr>
|
|
<tr>
|
|
<td>3</td>
|
|
<td>ccc</td>
|
|
</tr>
|
|
</table>
|
|
</body>
|
|
</html>
|