3 ms·

I thought most of the security in Rails is provided by the rack-security middleware? Or am I forgetting something which Rails provides here?

• dcu 14y ago
  Escaping everything by default to avoid XSS attacks. that's a nice feature to have.
  • auxbuss 14y ago
    This can be done in Sinatra: http://www.sinatrarb.com/faq.html#auto_escape_html http://www.sinatrarb.com/faq.html#auto_escape_html