NZKoz rails_xss issues - Githubissues

NZKoz / rails_xss

A plugin for rails 2.3.5 applications which switches the default to escape by default. Later versions should use rails/rails_xss

MIT License

215 stars 39 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

text_field, text_area and other basic helpers are beeing escaped

#21 localguiding opened 13 years ago
2
lib/rails_xss/erubis.rb add_expr_literal() has issues with 'raw' inside strings.

#20 saschpe closed 13 years ago
1
not compatible with Textilize

#19 ghost closed 14 years ago
1
Issue with remote_function

#18 sobrinho closed 13 years ago
1
link_to text not being escaped

#17 pupeno opened 14 years ago
3
The result of debug is not marked as safe

#16 pupeno opened 14 years ago
1
join and html_safe

#15 ghazel closed 14 years ago
3
to_json should be html_safe!

#14 ghazel closed 14 years ago
2
output_buffer is nil

#13 ghazel closed 14 years ago
4
Make plugin respond to html_safe method

#12 fnando opened 14 years ago
1
Escaping is being done on static HTML in results of <%= cache... %> calls and tabnav plugin output

#11 weyus opened 14 years ago
5
[invalid] erubis caching partials in development mode

#10 nruth closed 14 years ago
3
debug output

#9 dgm closed 14 years ago
4
Is it possible to release it as a gem?

#8 pupeno closed 14 years ago
4
Escape select_ month, select_year and select_day of Rails

#7 danielvlopes closed 14 years ago
2
Concat calls in plugins/gems are escaped

#6 dpickett opened 14 years ago
3
Can you check for Erubis in the init.rb

#5 james2m closed 14 years ago
5
will_paginate: one helper escaped, other one not

#4 mislav closed 14 years ago
4
git repo path is case sensitive and the readme has the wrong case

#3 terrcin closed 14 years ago
0
button_to not marked safe

#2 minaguib closed 14 years ago
2
Helper methods should escape HTML in parameters

#1 ryanb opened 14 years ago
24