在Rails中转义此HTML的正确方法

Question

I'm adding a very basic version of the Stackoverflow question formatting system to my app. I've got it to the point where this string:

_italic_ and **bold** and `@inline_code` and: \n    </code snippet>

becomes:

<i>italic</i> and <b>bold</b> and <span class="block-code">@inline_code</span> and: <br/>
<span class="block-code"></code snippet></span>

What is the correct and safest way to display this so that the bold, italic and span tags all become HTML tags but other tags are displayed as text?

Answer 1

The solution was to swap the ampersands and less-than symbols for HTML entities...

string.gsub("&", "&amp;").gsub("<", "&lt;")

...and then wrap the ouput in <pre> tags.