/Ruby on Rails 4.1

module ActionView::Helpers::OutputSafetyHelper

Public Instance Methods

raw(stringish) Show source

This method outputs without escaping a string. Since escaping tags is now default, this can be used when you don't want Rails to automatically escape tags. This is not recommended if the data is coming from the user's input.

For example:

raw @user.name
# => 'Jimmy <alert>Tables</alert>'
# File actionview/lib/action_view/helpers/output_safety_helper.rb, line 16
def raw(stringish)
safe_join(array, sep=$,) Show source

This method returns a html safe string similar to what Array#join would return. All items in the array, including the supplied separator, are html escaped unless they are html safe, and the returned string is marked as html safe.

safe_join(["<p>foo</p>".html_safe, "<p>bar</p>"], "<br />")
# => "<p>foo</p>&lt;br /&gt;&lt;p&gt;bar&lt;/p&gt;"

safe_join(["<p>foo</p>".html_safe, "<p>bar</p>".html_safe], "<br />".html_safe)
# => "<p>foo</p><br /><p>bar</p>"
# File actionview/lib/action_view/helpers/output_safety_helper.rb, line 31
def safe_join(array, sep=$,)
  sep = ERB::Util.html_escape(sep)

  array.map { |i| ERB::Util.html_escape(i) }.join(sep).html_safe

© 2004–2016 David Heinemeier Hansson
Licensed under the MIT License.