Feature #1724

Support for "&*uml;"-HTML-codes in ERB::Util.html_escape (solution included)

Added by Volkmar Schulz over 2 years ago. Updated 10 months ago.

[ruby-core:24140]
Status:Open Start date:07/05/2009
Priority:Normal Due date:
Assignee:- % Done:

0%
Category:-
Target version:-

Description

Certain language specific chars like the german "Umlaute" are represented in HTML with "ä" (ä), "ü" (ü) etc.
Since ERB::Util.html_escape escapes the & to become "&" one cannot use these HTML codes.

To work around this problem I modified ERB::Util.html_escape like this:

    def html_escape(s)
      s.to_s.gsub(/&(?!.uml)/, "&amp;").gsub(/\"/, "&quot;").gsub(/>/, "&gt;").gsub(/</, "&lt;")
    end

The modification is in the first call of gsub where I added the condition (?!.uml).
it forces the function to ignore the "&" if it is followed by a pattern that indicates one of the aforementiond HTML-codes.

I consider this being a safe modification.

Also available in: Atom PDF