raw vs. html_safe vs. h to unescape html

Question

Suppose I have the following string

@x = \"Turn me into a link\"

In my view, I want a link to be displayed.

Answer 1

The best safe way is: <%= sanitize @x %>

It will avoid XSS!