Correct JavaScript guide example

[CHTJonas]

Summary

Corrects a small error in the documentation regarding usage of JavaScript in Rails 😄

1. Swaps the #users jQuery selector to correct position.
2. Prevents ERB from escaping the HTML using the raw helper.

[p8]

This change isn't correct and should probably be reverted.
appendTo Inserts every element in the set of matched elements to the end of the target. https://api.jquery.com/appendTo/
raw shouldn't be used either because of XSS.

[kamipo]

Agree, this is correct as is. Reverted fb60def.

[CHTJonas]

Sorry my mistake - think I must've been getting confused with jQuery's .append()! 😕

Regarding the XSS: I have tested some code that's similar to the example in the docs and it seems to only work when using raw because otherwise Rails tries to escape all the HTML, and trying to append this escaped HTML makes the user's browser very unhappy:

$( "<%= j render 'thing', thing: @thing, thingy: @thingy %>" ).appendTo("tr#thing-<%= @thing.id %>");

Error: Syntax error, unrecognized expression: <tr id="thing-6649">
  <td>Blood Music</td>
[snip]

Am I doing something wrong here? And apologies for mistakes - first PR in an open-source project.

[CHTJonas]

Ok so I did some more digging on this... Turns out it's an issue with the escape_utils gem which I'm using. Sorry for wasting your time!