使用Javascript + Rails转义报价

Question

In my rails app, I'm adding text dynamically to the page using something like this

$('.container').append('<div class="test"><%=description%></div>')

The issue is that sometimes the ruby variable "description" contains single quotes (for example, it might container the word "I'm"), which leads to errors when the page tries to render the text.

What's the best way to avoid this problem by escaping quotes in description ?

Answer 1

Checkout Rails' JavaScript Helper , in particular escape_javascript(javascript)

Escapes carriage returns and single and double quotes for JavaScript segments.

Also available through the alias j(). This is particularly helpful in JavaScript responses, like:

$('some_element').replaceWith('<%=j render 'some/element_template' %>');