<%= h(...) %> で HTML エスケープ

kyanny · Jan 19, 2010 · dcb97aa · dcb97aa
1 parent 40338cf
commit dcb97aa
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/demo/app/views/say/hello.html.erb b/demo/app/views/say/hello.html.erb
@@ -17,5 +17,6 @@
     <%= count %>...<br />
     <% end %>
     発射!
+    Eメール: <%= h("Ann & Bill <frazers@isp.email>") %>
   </body>
 </html>