# \<%=h %\>

**URL:** <https://www.ruby-forum.com/t/h/170740>\
**Category:** Ruby\
**Created:** [June 22, 2009, 11:16am UTC](https://www.ruby-forum.com/t/h/170740 "2009-06-22T11:16:59Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sushrut](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/7feea3/32.png) [@sushrut](https://www.ruby-forum.com/u/sushrut)\
**Post date:** [June 22, 2009, 11:16am UTC](https://www.ruby-forum.com/t/h/170740/1 "2009-06-22T11:16:59Z")

</div>

Why this syntex is use \<%=h … %\>  
I can’t get any help of this syntex, can u plz help me out.

---

<div class="post-metadata">

**Author:** ![sushrut](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/7feea3/32.png) [@sushrut](https://www.ruby-forum.com/u/sushrut)\
**Post date:** [June 22, 2009, 11:26am UTC](https://www.ruby-forum.com/t/h/170740/2 "2009-06-22T11:26:42Z")

</div>

On Mon, Jun 22, 2009 at 11:17 AM, Sushrut S.[removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)  
wrote:

> ## Why this syntex is use \<%=h … %\> I can’t get any help of this syntex, can u plz help me out.
> 
> Posted via [http://www.ruby-forum.com/](http://www.ruby-forum.com/).

h() sanatizes the output of text to prevent malicious code being  
inserted into your app via user submitted content  
See:  
[http://www.railsbrain.com/api/rails-2.2.2/doc/index.html?a=M000118&name=html\_escape](http://www.railsbrain.com/api/rails-2.2.2/doc/index.html?a=M000118&name=html_escape)

Andrew T.  
[http://ramblingsonrails.com](http://ramblingsonrails.com)

[http://MyMvelope.com](http://MyMvelope.com) - The SIMPLE way to manage your savings

---

<div class="post-metadata">

**Author:** ![sushrut](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/7feea3/32.png) [@sushrut](https://www.ruby-forum.com/u/sushrut)\
**Post date:** [June 22, 2009, 12:47pm UTC](https://www.ruby-forum.com/t/h/170740/3 "2009-06-22T12:47:54Z")

</div>

On Mon, Jun 22, 2009 at 11:25 AM, Andrew  
Timberlake[removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> See: [http://www.railsbrain.com/api/rails-2.2.2/doc/index.html?a=M000118&name=html\_escape](http://www.railsbrain.com/api/rails-2.2.2/doc/index.html?a=M000118&name=html_escape)

Andrew I guess your reply what was OP wanted, it was definitely not  
what he asked 😉  
Let him give that too, who knows

\<%=h … %\>  
is equivalent to  
\<%= h( … ) =\>

you might get better answers on the Rail Mailing List on these topics.  
But you did still well to post here (too) it is an ERB question in  
fact but h is a Rails helper IIRC.

## Cheers Robert

Toutes les grandes personnes ont d’abord été des enfants, mais peu  
d’entre elles s’en souviennent.

All adults have been children first, but not many remember.

[Antoine de Saint-Exupéry]