<%=h @text_from_user %>
The point is 'h' helper.
http://guides.rubyonrails.org/getting_started.html - will be very
useful to read.
Good luck.
On Apr 5, 2:11 pm, Tushar Gandhi <li...@ruby-forum.com> wrote:
> Hi,
> I am facing a following problem:-
> I have app in which user can edit his/her personal information and we
> are showing it on browser. Some of users has added
> "<script>alert('Hack');</script>" javascript in name textbox. Due to
> this whenever I am showing name on browser it is executing the script
> and giving javascript alert.
> Can anyone tell me how to fix this? Is there any plugin avaliable?
>
> Thanks,
> Tushar
> --
> Posted viahttp://www.ruby-forum.com/.
--
You received this message because you are subscribed to the Google Groups "Ruby
on Rails: Talk" group.
To post to this group, send email to rubyonrails-t...@googlegroups.com.
To unsubscribe from this group, send email to
rubyonrails-talk+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en.
