> If we can be comfortable we're not introduce a security regression,
> then we can down to the talk about how we encode those values,
> whether it's sane to assume utf-8 encoded strings, and all that other
> good stuff :)

One thing to consider, too, is that this only affects JSON posted on a
web page, not sent between requests.  Perhaps there's something like
the html_encode helper for JSON:

<%= j @foo.to_json %>

Just throwing ideas out...


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Core" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-core?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to