Escape excerpt text by default (pat#42)

lib/thinking_sphinx.rb

@@ -6,6 +6,7 @@
 require 'riddle'
 require 'after_commit'
 require 'yaml'
+require 'cgi'
 
 require 'thinking_sphinx/core/array'
 require 'thinking_sphinx/core/string'

lib/thinking_sphinx/excerpter.rb

@@ -14,7 +14,7 @@ def initialize(search, instance)
     end
 
     def method_missing(method, *args, &block)
-      string = @instance.send(method, *args, &block).to_s
+      string = CGI::escapeHTML @instance.send(method, *args, &block).to_s
 
       @search.excerpt_for(string, @instance.class)
     end

spec/fixtures/models.rb

@@ -106,6 +106,10 @@ def big_name
     name.upcase
   end
 
+  def string_to_escape
+    'test "escaping" <characters>'
+  end
+
   def sphinx_attributes
     :existing
   end

spec/lib/thinking_sphinx/excerpter_spec.rb

@@ -40,6 +40,14 @@
       @excerpter.big_name
     end
 
+    it "should escape the text in the excerpt" do
+      @search.should_receive(:excerpt_for) do |string, model|
+        string.should == 'test "escaping" <characters>'
+      end
+
+      @excerpter.string_to_escape
+    end
+
     it "should still raise an exception if no column or method exists" do
       lambda {
         @excerpter.foo