# Rails 2.3.8 Upgrade Mods

**URL:** <https://www.ruby-forum.com/t/rails-2-3-8-upgrade-mods/189155>\
**Category:** Rails\
**Created:** [May 25, 2010, 5:46pm UTC](https://www.ruby-forum.com/t/rails-2-3-8-upgrade-mods/189155 "2010-05-25T17:46:07Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![dbkbali](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/cc9497/32.png) [@dbkbali](https://www.ruby-forum.com/u/dbkbali)\
**Post date:** [May 25, 2010, 5:46pm UTC](https://www.ruby-forum.com/t/rails-2-3-8-upgrade-mods/189155/1 "2010-05-25T17:46:07Z")

</div>

Same problem here but solved! hopefully this is helpful. Solution was  
to watch Ryan B. Railscast on Rails 3 XSS, and then to ensure any  
strings being sent out by my form and custom helpers was HTML Safe =\>  
Just look for where the helpers are rendering tags and string and add  
the “.html\_safe” method on the end.

Hope this is helpful