# Rails 3 - Ruby 1.9.2 - cannot output correctly HTML special characters

**URL:** <https://www.ruby-forum.com/t/rails-3-ruby-1-9-2-cannot-output-correctly-html-special-characters/192980>\
**Category:** Rails\
**Created:** [August 9, 2010, 1:55pm UTC](https://www.ruby-forum.com/t/rails-3-ruby-1-9-2-cannot-output-correctly-html-special-characters/192980 "2010-08-09T13:55:59Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kadoudal](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/k/f0a364/32.png) [@kadoudal](https://www.ruby-forum.com/u/kadoudal)\
**Post date:** [August 9, 2010, 1:55pm UTC](https://www.ruby-forum.com/t/rails-3-ruby-1-9-2-cannot-output-correctly-html-special-characters/192980/1 "2010-08-09T13:55:59Z")

</div>

this is my first Rails3-Ruby 1.9.2 test app…  
I cannot out a simple html string w special characters like ©

copyright = “Copyright © " + " 2010 , TestApp Ltd.”

using copyright in my view, I see displayed

Copyright © 2010, TestApp Ltd.

what’s wrong ? what’s missing somewhere (was running well in Rails  
2.3-Ruby 1…8.7 )

thanks fyi

---

<div class="post-metadata">

**Author:** ![kadoudal](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/k/f0a364/32.png) [@kadoudal](https://www.ruby-forum.com/u/kadoudal)\
**Post date:** [August 9, 2010, 2:10pm UTC](https://www.ruby-forum.com/t/rails-3-ruby-1-9-2-cannot-output-correctly-html-special-characters/192980/2 "2010-08-09T14:10:37Z")

</div>

On 09 Aug 2010, at 13:54, Erwin wrote:

> 2.3-Ruby 1…8.7 )  
> HTML escaping is done by default in Rails 3:

[http://asciicasts.com/episodes/204-xss-protection-in-rails-3](http://asciicasts.com/episodes/204-xss-protection-in-rails-3)

> **[RailsDispatch.com is for sale | HugeDomains](https://www.hugedomains.com/domain_profile.cfm?d=railsdispatch.com)**
>
> Short term financing makes it possible to acquire highly sought-after domains without the strain of upfront costs. Find your domain name today.

> **[SafeBuffers and Rails 3.0](https://yehudakatz.com/2010/02/01/safebuffers-and-rails-3-0/)**
>
> As you may have read, Rails adds XSS protection by default in Rails 3. This
> means that you no longer have to manually escape user input with the h helper,
> because Rails will automatically escape it for you.
> 
> However, it's not as simple as all that....

The solution in is the posts above.

Best regards

Peter De Berdt

---

<div class="post-metadata">

**Author:** ![kadoudal](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/k/f0a364/32.png) [@kadoudal](https://www.ruby-forum.com/u/kadoudal)\
**Post date:** [August 9, 2010, 3:40pm UTC](https://www.ruby-forum.com/t/rails-3-ruby-1-9-2-cannot-output-correctly-html-special-characters/192980/3 "2010-08-09T15:40:14Z")

</div>

Thanks Peter … I missed that : copyright.html\_safe