Disable HTML escaping in erb templates

前端 未结 3 851
温柔的废话
温柔的废话 2020-11-27 20:01

In a Rails 3 application I have a domain class where one attribute stores pure HTML content (it\'s a blog app, the domain class is Post).

In the ERB templates, I ne

相关标签:
3条回答
  • 2020-11-27 20:33

    Using a double equals means the result is not escaped...

    <%== somePost.content %>
    

    See this SO question about it - What does <%== %> do in rails erb?

    0 讨论(0)
  • 2020-11-27 20:37

    Use raw(string), as described in the release notes.

    7.4.3 Other Changes

    You no longer need to call h(string) to escape HTML output, it is on by default in all view templates. If you want the unescaped string, call raw(string).

    Basically, where you did

    <%=h @model.attr %>
    

    before you can now use

    <%= @model.attr %>
    

    and where you did that before you can now use

    <%=raw @model.attr %>
    
    0 讨论(0)
  • 2020-11-27 20:42

    Try using raw(somePost.content). Alternatively, somePost.content.html_safe.

    0 讨论(0)
提交回复
热议问题