[Rails] Re: Best Practices: Escaping text on input or output?

Alex Young alex at blackkettle.org
Wed Feb 1 12:51:34 GMT 2006


Phillip Hutchings wrote:
> I think it's always best to explicitly escape, then you know that you've 
> done it.
+1 to that.  Moreover, if you get used to magic_quotes, you're more 
likely to make the assumption that they apply when you're developing 
something to be deployed where they're actually turned off.  Can be nasty.

-- 
Alex


More information about the Rails mailing list