Contents

require 'cgi'
require 'uri'

class String

  # String#escape is an extensible escaping mechanism for string.  currently
  # it suports
  #   '<div>foo bar</div>'.esc(:html)
  #   'foo bar'.esc(:uri)
  #   'foo bar'.esc(:cgi)
  #   "foo 'bar'".esc(:sql)

  def escape which = :html
    case which
    when :html
      ::CGI.escapeHTML(self)
    when :cgi
      ::CGI.escape(self)
    when :uri
      ::URI.escape(self)
    when :sql  # TODO - leverage DBI or something
      gsub(%r/'/, "''")
    else
      raise ArgumentError, "do not know how to escape '#{ which }'"
    end
  end

  alias_method 'esc', 'escape'
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
ramaze-0.3.9	lib/ramaze/snippets/string/esc.rb
ramaze-0.3.9.1	lib/ramaze/snippets/string/esc.rb