rails_xss icon indicating copy to clipboard operation
rails_xss copied to clipboard

Published 20 hours ago • verified publisher icon NZKoz

text_field, text_area and other basic helpers are beeing escaped

Open localguiding opened this issue 13 years ago • 2 comments

Hi, Currently some helpers like f.text_field are been escaped, why ? I have installed erubis before plugin, should I configure erubis to work together with this plugin some way ? Thanks in advance.

ps: rails 2.3.5

localguiding avatar Jun 19 '11 03:06 localguiding

Seeing this too. I'm hoping I've done something wrong. Any advice? f.label isn't being escaped but f.text_field is. f.check_box isn't.

Weird.

brendon avatar Jun 28 '11 05:06 brendon

Very obscure. If you're using mislav's standarista plugin to output HTML tags instead of XHTML then this will trip you up if you haven't upgraded to the latest version of that plugin. I only twigged when I ran the rails_xss tests and noticed that many failed due to the lack of XML style self closing tags in my output. Hope this helps someone else in the future :)

brendon avatar Jun 29 '11 05:06 brendon