lib/haml/helpers/action_view_mods.rb in haml-2.2.8 vs lib/haml/helpers/action_view_mods.rb in haml-2.2.9

@@ -24,9 +24,10 @@
       alias_method :output_buffer_without_haml, :output_buffer
       alias_method :output_buffer, :output_buffer_with_haml
 
       def set_output_buffer_with_haml(new)
         if is_haml?
+          new = String.new(new) if Haml::Util.rails_xss_safe? && new.is_a?(ActionView::SafeBuffer)
           haml_buffer.buffer = new
         else
           set_output_buffer_without_haml new
         end
       end