Escaping HTML in Rails

Question

What is the recommended way to escape HTML to prevent XSS vulnerabilities in Rails apps?

Should you allow the user to put any text into the database but escape it when d

Answer 1

Or with this plugin - no need for h 8)

http://railspikes.com/2008/1/28/auto-escaping-html-with-rails