Hi, well, there are actually more places in activescaffold that have to be fixed. Master branch is on the way to find all places.
So, I would suggest to upgrade your activescaffold version to latest. and in addition take a look at the following: http://railscasts.com/episodes/204-xss-protection-in-rails-3 It s for rails 3, but should give you a good introduction to this topic and how to fix these issues on your own. -- Volker On 25 Jun., 05:11, Andrés Mejía <[email protected]> wrote: > Hi guys, > > I think Rails 2.3.8 changed its default to escape everything on views (i.e. > convert > into >). > I just updated to this version of Rails, and now I'm seeing: > > <!--[if IE]><![endif]--> > > on top of my Active Scaffold layout. This is introduced by <%= > active_scaffold_includes %> on my layout. > > It looks like we need to tell that method to not escape those < and > signs > because we do really want them unescaped. > > Any idea on how to do that? > > Cheers, > Andrés Mejía -- You received this message because you are subscribed to the Google Groups "ActiveScaffold : Ruby on Rails plugin" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/activescaffold?hl=en.
