# Why remove strip\_tags() function in rails 2.0.2

**URL:** <https://www.ruby-forum.com/t/why-remove-strip-tags-function-in-rails-2-0-2/125503>\
**Category:** Rails\
**Created:** [January 9, 2008, 7:08pm UTC](https://www.ruby-forum.com/t/why-remove-strip-tags-function-in-rails-2-0-2/125503 "2008-01-09T19:08:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![OnRails](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/o/51bf81/32.png) [@OnRails](https://www.ruby-forum.com/u/OnRails)\
**Post date:** [January 9, 2008, 7:08pm UTC](https://www.ruby-forum.com/t/why-remove-strip-tags-function-in-rails-2-0-2/125503/1 "2008-01-09T19:08:12Z")

</div>

why remove strip\_tags() function in rails 2.0.2. and in rails1.2.6 I  
used this function. and how can I solve this problem?  
Thanks!

---

<div class="post-metadata">

**Author:** ![OnRails](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/o/51bf81/32.png) [@OnRails](https://www.ruby-forum.com/u/OnRails)\
**Post date:** [January 9, 2008, 9:36pm UTC](https://www.ruby-forum.com/t/why-remove-strip-tags-function-in-rails-2-0-2/125503/2 "2008-01-09T21:36:09Z")

</div>

OnRails wrote:

> why remove strip\_tags() function in rails 2.0.2. and in rails1.2.6 I  
> used this function. and how can I solve this problem?  
> Thanks!

> **[Don’t use strip\_tags, strip\_links and sanitize - Ruby on Rails Security Project](https://rorsecurity.info/journal/2007/08/17/dont-use-strip_tags-strip_links-and-sanitize.html)**
>
> Update: This is about earlier releases, Rails 2.0 provides a new sanitize method which uses a white list. Also, strip\_tags and strip\_links have been updated, the attack vectors below do not work anymore.   Rails includes several insecure text...

---

<div class="post-metadata">

**Author:** ![OnRails](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/o/51bf81/32.png) [@OnRails](https://www.ruby-forum.com/u/OnRails)\
**Post date:** [January 10, 2008, 9:21am UTC](https://www.ruby-forum.com/t/why-remove-strip-tags-function-in-rails-2-0-2/125503/3 "2008-01-10T09:21:05Z")

</div>

On 9 Jan 2008, at 20:36, Jeremy Weiskotten wrote:

> OnRails wrote:
> 
> > why remove strip\_tags() function in rails 2.0.2. and in rails1.2.6 I  
> > used this function. and how can I solve this problem?  
> > Thanks!
> 
> [Don’t use strip\_tags, strip\_links and sanitize - Ruby on Rails Security Project](http://www.rorsecurity.info/2007/08/17/dont-use-strip_tags-strip_links-and-sanitize/)  
> Except of course that in rails 2 strip\_tags, strip\_links, sanitize  
> have been reeimplemented using a white list approach and so they  
> should be safe again

Fred