lib/hanami/utils/escape.rb in hanami-utils-1.0.0.beta2 vs lib/hanami/utils/escape.rb in hanami-utils-1.0.0.beta3
- old
+ new
@@ -413,10 +413,10 @@
# @example Good practice
# <div><%= Hanami::Utils::Escape.html('<script>alert(1);</script>') %></div>
# <div><script>alert(1);</script></div>
#
# @example Bad practice
- # # WRONG Use Escape.html_attribute
+ # # WRONG Use Escape.html_attribute instead
# <a title="<%= Hanami::Utils::Escape.html('...') %>">link</a>
def self.html(input)
input = encode(input)
return input if input.is_a?(SafeString)