diff options
| author | Wincent Colaiuta <win@wincent.com> | 2010-06-17 08:39:13 +0200 |
|---|---|---|
| committer | David Heinemeier Hansson <david@loudthinking.com> | 2010-06-17 09:41:04 -0500 |
| commit | a424808df95c5ebe66d02f0d743e741a1864baa7 (patch) | |
| tree | 8d42d5ea86e0fba2e04922fb233271bd903a89db /actionpack/lib/action_dispatch | |
| parent | 69bc8b26a9be246acc06eaab09063eb97f76aa00 (diff) | |
| download | rails-a424808df95c5ebe66d02f0d743e741a1864baa7.tar.gz rails-a424808df95c5ebe66d02f0d743e741a1864baa7.tar.bz2 rails-a424808df95c5ebe66d02f0d743e741a1864baa7.zip | |
truncate() should not try to produce HTML-safe output
As discussed in Lighthouse ticket #4825 and ticket #4878, the truncate()
method cannot guarantee safe output for all possible inputs/offsets, so
it is best to leave the output unsafe so that it gets escaped when used
in a view.
Signed-off-by: Santiago Pastorino <santiago@wyeworks.com>
Signed-off-by: David Heinemeier Hansson <david@loudthinking.com>
Diffstat (limited to 'actionpack/lib/action_dispatch')
0 files changed, 0 insertions, 0 deletions