Dghim Sami
•
Aug 20, 2025
•
in Articles
• 1 min read
Ruby on Rails has your back when it comes to cross-site scripting XSS - by default, it escapes all strings in your views so malicious HTML and JavaScript can't execute in your users' browsers.
But there's a sharp tool in Rails' toolbox called .html...