NOTE / Ruby-On-Rails

Rails 特殊字元過濾(白名單)

使用 Rails 過濾特殊字元方法

2018.08.26 / Ruby-On-Rails /

Rails

Rails HTML Sanitizers

filter_words = "Greg'\bs works" # \b: 表示退格鍵
ActionController::Base.helpers.sanitize(filter_words
=> "Greg's works"

ActionController::Base.helpers.sanitize("<script>I'am script</script>")
=> "I'am script"

REFERENCE / 2

• Ruby 正規則表示式 ↗
• rails sanitize ↗