Probally a regular question about security

Rails
1

Hi there,
is there any RoR function that works like PHP´s htmlentities()?
Stripping all html tags that I don´t allow.

Thank you

2

In a rails view file, I believe the method h() is analogous to php’s
htmlentities. I assume h() is an alias of the method CGI::escapeHTML(),
but
I’m not sure.

Good luck.

3

Jimmy Kittiyachavalit wrote:

In a rails view file, I believe the method h() is analogous to php’s
htmlentities. I assume h() is an alias of the method CGI::escapeHTML(),
but
I’m not sure.

Good luck.

Yes, that’s right

<%=h ‘bar’ %>

returns:

<foo>bar</foo>