On Jun 24, 2008, at 7:01 AM, [EMAIL PROTECTED] wrote:


Is anyone even using html in the description? Is it ok to just replace


How about the belt and suspenders approach?
<%= h sanitize(todo.description) %>

DRY approach:

module ApplicationHelper
  def insanitize(data = "")
    return h sanitize data
  end
end
.
.
.
<%= insanitize todo.description %>

I'm not sure how I got HTML tags in the description field. I certainly didn't type them, and I don't think I pasted them there. Well, it's like me father used to say, " Son, you could break a steel ball."

I suppose I should finish my coffee before writing email.

--
Jeff Gipson
Process Networks Plus, Inc.




Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Tracks-discuss mailing list
[email protected]
http://lists.rousette.org.uk/mailman/listinfo/tracks-discuss

Reply via email to