38 lines
1.3 KiB
Ruby
38 lines
1.3 KiB
Ruby
require 'active_support/core_ext/string/output_safety'
|
|
|
|
module ActionView #:nodoc:
|
|
# = Action View Raw Output Helper
|
|
module Helpers #:nodoc:
|
|
module OutputSafetyHelper
|
|
# This method outputs without escaping a string. Since escaping tags is
|
|
# now default, this can be used when you don't want Rails to automatically
|
|
# escape tags. This is not recommended if the data is coming from the user's
|
|
# input.
|
|
#
|
|
# For example:
|
|
#
|
|
# <%=raw @user.name %>
|
|
def raw(stringish)
|
|
stringish.to_s.html_safe
|
|
end
|
|
|
|
# This method returns a html safe string similar to what <tt>Array#join</tt>
|
|
# would return. All items in the array, including the supplied separator, are
|
|
# html escaped unless they are html safe, and the returned string is marked
|
|
# as html safe.
|
|
#
|
|
# safe_join(["<p>foo</p>".html_safe, "<p>bar</p>"], "<br />")
|
|
# # => "<p>foo</p><br /><p>bar</p>"
|
|
#
|
|
# safe_join(["<p>foo</p>".html_safe, "<p>bar</p>".html_safe], "<br />".html_safe)
|
|
# # => "<p>foo</p><br /><p>bar</p>"
|
|
#
|
|
def safe_join(array, sep=$,)
|
|
sep ||= "".html_safe
|
|
sep = ERB::Util.html_escape(sep)
|
|
|
|
array.map { |i| ERB::Util.html_escape(i) }.join(sep).html_safe
|
|
end
|
|
end
|
|
end
|
|
end |