Rails 3 escapes content by default now.

See http://www.railsdispatch.com/posts/security for more details.

So, now you have to use either:

<%=raw '<h1>hello</h1>' %>

Or:

<%= '<h1>hello</h1>'.html_safe %>

Regards
Kieran


On May 8, 2:37 pm, "[email protected]" <[email protected]>
wrote:
> Rail2 and Rails3 beta3 process <%= '<h1>hello</h1>' %> differently.
>
> Rails3 must use <%= capture {'<h1>hello</h1>'} %> to get the same
> result as Rails2
>
> Is this intentional or is it a bug?

-- 
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Talk" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-talk?hl=en.

Reply via email to