ERB::Util

Constants

HTML_ESCAPE
JSON_ESCAPE

Public Class Methods

h(s) click to toggle source

Alias for: html_escape

html_escape(s) click to toggle source

A utility method for escaping HTML tag characters. This method is also aliased as h.

In your ERb templates, use this method to escape any unsafe content. For example:

  <%=h @person.name %>

Example:

  puts html_escape("is a > 0 & a < 10?")
  # => is a &gt; 0 &amp; a &lt; 10?

    # File lib/active_support/core_ext/string/output_safety.rb, line 18
18:     def html_escape(s)
19:       s = s.to_s
20:       if s.html_safe?
21:         s
22:       else
23:         s.gsub(/[&"><]/) { |special| HTML_ESCAPE[special] }.html_safe
24:       end
25:     end

Also aliased as: h

j(s) click to toggle source

Alias for: json_escape

json_escape(s) click to toggle source

A utility method for escaping HTML entities in JSON strings. This method is also aliased as j.

In your ERb templates, use this method to escape any HTML entities:

  <%=j @person.to_json %>

Example:

  puts json_escape("is a > 0 & a < 10?")
  # => is a \u003E 0 \u0026 a \u003C 10?

    # File lib/active_support/core_ext/string/output_safety.rb, line 44
44:     def json_escape(s)
45:       s.to_s.gsub(/[&"><]/) { |special| JSON_ESCAPE[special] }
46:     end

Also aliased as: j

Private Instance Methods

h(s) click to toggle source

Alias for: html_escape

html_escape(s) click to toggle source

A utility method for escaping HTML tag characters. This method is also aliased as h.

In your ERb templates, use this method to escape any unsafe content. For example:

  <%=h @person.name %>

Example:

  puts html_escape("is a > 0 & a < 10?")
  # => is a &gt; 0 &amp; a &lt; 10?

    # File lib/active_support/core_ext/string/output_safety.rb, line 18
18:     def html_escape(s)
19:       s = s.to_s
20:       if s.html_safe?
21:         s
22:       else
23:         s.gsub(/[&"><]/) { |special| HTML_ESCAPE[special] }.html_safe
24:       end
25:     end

Also aliased as: h

j(s) click to toggle source

Alias for: json_escape

json_escape(s) click to toggle source

A utility method for escaping HTML entities in JSON strings. This method is also aliased as j.

In your ERb templates, use this method to escape any HTML entities:

  <%=j @person.to_json %>

Example:

  puts json_escape("is a > 0 & a < 10?")
  # => is a \u003E 0 \u0026 a \u003C 10?

    # File lib/active_support/core_ext/string/output_safety.rb, line 44
44:     def json_escape(s)
45:       s.to_s.gsub(/[&"><]/) { |special| JSON_ESCAPE[special] }
46:     end

Also aliased as: j

Home Classes Methods

In Files

Methods

Class Index

ERB::Util

Constants

Public Class Methods

Example:

Example:

Private Instance Methods

Example:

Example: