False positive - Unescaped model attribute

[johnnyshields]

False Positive

The view calls a helper function which escapes the variable

# view
<%= t(:my_translation, timeago: timeago(user.created_at)) %>

# helper
   def timeago(time)
     return unless time
     content_tag(:span, I18n.l(time))
   end

  | -Site Scripting | Unescaped model attribute near line 15: t(:added_by, :time_ago => timeago(Account.new.created_at))

[presidentbeef]

Hi Johnny,

What version of Rails is this? Don't you have autoescaping enabled?