-
Notifications
You must be signed in to change notification settings - Fork 0
a simple plugin for rails for escape html into model after save records
License
chebyte/simple_sanitizer_html
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
SimpleSanitizerHtml =================== SimpleSanitizerHtml is a small plugin for Rails for escape html into the model after save records. Example ======= For example you have the following model # ruby script/generate model Post title:string copy:text class Post simple_sanitizer_html end so, if you add a post like that $ ruby script/console Loading development environment (Rails 2.3.2) p >> p = Post.new => #<Post id: nil, title: nil, copy: nil, created_at: nil, updated_at: nil> >> p.title = "<script>alert('hi tuquito')</script>" => "<script>alert('hi tuquito')</script>" >> p.save => true >> p.title => "<script>alert('hi tuquito')</script>" >> this plugin can be useful for prevent XSS Injection or styles attacks Copyright (c) 2009 [chebyte - http://www.chebyte.com.ar], released under the MIT license
About
a simple plugin for rails for escape html into model after save records
Resources
License
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published