public this repo is viewable by everyone
Description: Ruby on Rails
Homepage: http://rubyonrails.org
Clone URL: git://github.com/rails/rails.git
100644 56 lines (49 sloc) 1.59 kb
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
require 'erb'
 
class ERB
  module Util
    HTML_ESCAPE = { '&' => '&amp;', '>' => '&gt;', '<' => '&lt;', '"' => '&quot;' }
    JSON_ESCAPE = { '&' => '\u0026', '>' => '\u003E', '<' => '\u003C'}
 
    # A utility method for escaping HTML tag characters.
    # This method is also aliased as <tt>h</tt>.
    #
    # In your ERb templates, use this method to escape any unsafe content. For example:
    # <%=h @person.name %>
    #
    # ==== Example:
    # puts html_escape("is a > 0 & a < 10?")
    # # => is a &gt; 0 &amp; a &lt; 10?
    def html_escape(s)
      s.to_s.gsub(/[&"><]/) { |special| HTML_ESCAPE[special] }
    end
 
    # A utility method for escaping HTML entities in JSON strings.
    # This method is also aliased as <tt>j</tt>.
    #
    # In your ERb templates, use this method to escape any HTML entities:
    # <%=j @person.to_json %>
    #
    # ==== Example:
    # puts json_escape("is a > 0 & a < 10?")
    # # => is a \u003E 0 \u0026 a \u003C 10?
    def json_escape(s)
      s.to_s.gsub(/[&"><]/) { |special| JSON_ESCAPE[special] }
    end
 
    alias j json_escape
    module_function :j
    module_function :json_escape
  end
end
 
module ActionView
  module TemplateHandlers
    class ERB < TemplateHandler
      include Compilable
 
      def compile(template)
        ::ERB.new(template, nil, @view.erb_trim_mode).src
      end
 
      def cache_fragment(block, name = {}, options = nil) #:nodoc:
        @view.fragment_for(block, name, options) do
          eval(ActionView::Base.erb_variable, block.binding)
        end
      end
    end
  end
end