diff options
author | Grey Baker <greysteil@gmail.com> | 2015-05-03 15:04:07 +0100 |
---|---|---|
committer | Grey Baker <greysteil@gmail.com> | 2015-06-08 18:50:38 +0100 |
commit | 05a2a6a0c5ac2384e52df9b8c2aa81352a51d7c7 (patch) | |
tree | 1e90feb55b9c8a49ddf3ca737185354a22d444bb /activemodel/lib/active_model/type/string.rb | |
parent | a69e0a5fcfbcd76f259ab1ed290fafa8726b44ba (diff) | |
download | rails-05a2a6a0c5ac2384e52df9b8c2aa81352a51d7c7.tar.gz rails-05a2a6a0c5ac2384e52df9b8c2aa81352a51d7c7.tar.bz2 rails-05a2a6a0c5ac2384e52df9b8c2aa81352a51d7c7.zip |
Handle invalid UTF-8 strings when HTML escaping
Use `ActiveSupport::Multibyte::Unicode.tidy_bytes` to handle invalid UTF-8
strings in `ERB::Util.unwrapped_html_escape` and `ERB::Util.html_escape_once`.
Prevents user-entered input passed from a querystring into a form field from
causing invalid byte sequence errors.
Diffstat (limited to 'activemodel/lib/active_model/type/string.rb')
0 files changed, 0 insertions, 0 deletions