http://simonwillison.net/2008-01-10T18:46:04+00:00Simon Willison2008-01-10T18:46:04+00:002008-01-10T18:46:04+00:00https://simonwillison.net/2008/Jan/10/safeerb/#atom-tag

<p><strong><a href="http://www.relevancellc.com/2008/1/9/is-your-rails-app-xss-safe">Is your Rails app XSS safe?</a></strong></p> SafeErb is an interesting take on auto-escaping for Rails: it throws an exception if you try to render a string that hasn’t been untainted yet. <p>Tags: <a href="https://simonwillison.net/tags/rails">rails</a>, <a href="https://simonwillison.net/tags/ruby">ruby</a>, <a href="https://simonwillison.net/tags/safeerb">safeerb</a>, <a href="https://simonwillison.net/tags/security">security</a>, <a href="https://simonwillison.net/tags/xss">xss</a></p>