This project is archived and is in readonly mode.
ERB monkypatch creates incompatibilities
-
Jeremy Kemper
- Milestone set to 2.3.7
- State changed from new to open
- Assigned user set to Santiago Pastorino
For forward compatibility with Rails 3. Everything supports the html-safety machinery out of the box, but it's turned off by default. You install the rails_xss plugin to enable.
Reopening ERB directly is unnecessary.
-
Santiago Pastorino
- Milestone changed from 2.3.7 to 2.3.6
- Assigned user cleared.
-
nex3
- Tag changed from 2.3.6, xss to 2, xss
How does monkeypatching ERB create forwards compatibility? Rails 3 doesn't monkeypatch ERB. ERB isn't used for html-safety... that's all Erubis. What reason could there possibly be for modifying ERB?
-
Jeremy Kemper
- State changed from open to duplicate
-
Andrea Campi
- Tag changed from 2, xss to 2-3-stable, xss
- Importance changed from to High