Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is there some way to do html escaping default with options? #476

Open
syuntouyou opened this issue Oct 1, 2018 · 0 comments
Open

Is there some way to do html escaping default with options? #476

syuntouyou opened this issue Oct 1, 2018 · 0 comments

Comments

@syuntouyou
Copy link

http://trailblazer.to/gems/cells/cells4.html

Cells per default does not escape HTML. However, you may run into problems when using Rails helpers. Internally, those helpers often blindly escape. This is not Cells’ fault but a design flaw in Rails.

I know this is not a bug, but want to provide a option to do html escaping by default.

Because set html escape for every input data is difficult and will cause security problem if forget.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant