Absolutely, bbcode and markdown processing are significantly better alternatives. Also, I'm pretty sure you're specifically supposed to use rails-html-sanitize

Absolutely, bbcode and markdown processing are significantly better alternatives. Also, I'm pretty sure you're specifically supposed to use rails-html-sanitizer with a whitelist. (See: Rails::Html::WhiteListSanitizer)