# Anti-xss library for ruby?

**URL:** <https://www.ruby-forum.com/t/anti-xss-library-for-ruby/50723>\
**Category:** Ruby\
**Created:** [December 20, 2005, 2:27pm UTC](https://www.ruby-forum.com/t/anti-xss-library-for-ruby/50723 "2005-12-20T14:27:18Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![nexflo](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/n/58956e/32.png) [@nexflo](https://www.ruby-forum.com/u/nexflo)\
**Post date:** [December 20, 2005, 2:27pm UTC](https://www.ruby-forum.com/t/anti-xss-library-for-ruby/50723/1 "2005-12-20T14:27:18Z")

</div>

Hi!

Does anybody know a ruby anti-xss library that passes all the cases  
described in the xss cheat sheet ([http://ha.ckers.org/xss.html](http://ha.ckers.org/xss.html))?

Thanks!

Ciao!  
Florian

---

<div class="post-metadata">

**Author:** ![nexflo](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/n/58956e/32.png) [@nexflo](https://www.ruby-forum.com/u/nexflo)\
**Post date:** [December 20, 2005, 10:00pm UTC](https://www.ruby-forum.com/t/anti-xss-library-for-ruby/50723/2 "2005-12-20T22:00:22Z")

</div>

Florian W. wrote:

> Does anybody know a ruby anti-xss library that passes all the cases  
> described in the xss cheat sheet ([http://ha.ckers.org/xss.html](http://ha.ckers.org/xss.html))?

I’ve been an advocate of whitelisting before, but after reading this I  
would never again use anything else. Don’t even try doing blacklisting.  
It won’t work.