Class Rack::Protection::EscapedParams
In: lib/rack/protection/escaped_params.rb
Parent: Base
Prevented attack:XSS
Supported browsers:all
More infos:en.wikipedia.org/wiki/Cross-site_scripting

Automatically escapes Rack::Request#params so they can be embedded in HTML or JavaScript without any further issues. Calls html_safe on the escaped strings if defined, to avoid double-escaping in Rails.

Options:

escape:What escaping modes to use, should be Symbol or Array of Symbols. Available: :html (default), :javascript, :url

Methods

call   escape   escape_hash   escape_string   handle   new  

External Aliases

escape -> escape_url

Public Class methods

Public Instance methods

[Validate]