diff options
| author | Grey Baker <greysteil@gmail.com> | 2015-05-03 15:04:07 +0100 |
|---|---|---|
| committer | Grey Baker <greysteil@gmail.com> | 2015-06-08 18:50:38 +0100 |
| commit | 05a2a6a0c5ac2384e52df9b8c2aa81352a51d7c7 (patch) | |
| tree | 1e90feb55b9c8a49ddf3ca737185354a22d444bb /activesupport/test/core_ext/hash_ext_test.rb | |
| parent | a69e0a5fcfbcd76f259ab1ed290fafa8726b44ba (diff) | |
| download | rails-05a2a6a0c5ac2384e52df9b8c2aa81352a51d7c7.tar.gz rails-05a2a6a0c5ac2384e52df9b8c2aa81352a51d7c7.tar.bz2 rails-05a2a6a0c5ac2384e52df9b8c2aa81352a51d7c7.zip | |
Handle invalid UTF-8 strings when HTML escaping
Use `ActiveSupport::Multibyte::Unicode.tidy_bytes` to handle invalid UTF-8
strings in `ERB::Util.unwrapped_html_escape` and `ERB::Util.html_escape_once`.
Prevents user-entered input passed from a querystring into a form field from
causing invalid byte sequence errors.
Diffstat (limited to 'activesupport/test/core_ext/hash_ext_test.rb')
0 files changed, 0 insertions, 0 deletions