Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Todd Sundsted

Todd Sundsted

Not a member

Todd Sundsted's latest activity

Wednesday, June 23 2010
3785 Content_tag_string Sanitizes Possibly Unsafe HTML was updated in Ruby on Rails
  • Todd Sundsted
    Todd Sundsted commented at 2:07 PM

    Everything looks good.

    I tested with Rails 2.3.8 and the latest Erubis.

      > x = '<script>alert("pwned")</script>'
 => "<script>alert(\"pwned\")</script>" 
  > ...
  • Todd Sundsted
    Todd Sundsted commented at 4:44 AM

    Thanks, guys! Will do.
Wednesday, February 03 2010
3785 Content_tag_string Sanitizes Possibly Unsafe HTML was updated in Ruby on Rails
  • Todd Sundsted
    • Tag changed from 2.3.5, content_tag, content_tag_string, html_safe to 2, content_tag, content_tag_string, html_safe
    by Todd Sundsted at 2:16 AM

    I committed the following patch to my fork of rails_xss, which handles all of the problems I've come across. Needs testing against other reported issues:

    http:...
Monday, January 25 2010
3785 Content_tag_string Sanitizes Possibly Unsafe HTML was updated in Ruby on Rails
  • Todd Sundsted
    • Tag changed from content_tag, content_tag_string, html_safe to 2.3.5, content_tag, content_tag_string, html_safe
    by Todd Sundsted at 2:21 AM
  • Todd Sundsted
    Todd Sundsted created the ticket at 2:20 AM

    This ticket is related to the ongoing work on HTML safe strings (ticket #3018). It is related to tickets #3448 #3450 #3449 and points to the underlying problem.

    ...