Escaping HTML to JSON with Rails 3

Question

I'm trying to escape HTML content from the db to JSON data. But JSON keys are escape too. Here is an example :

 data : { :content => "<script>alert('SOF');</script>" } 

and in the view :

 h(@data.to_json).html_safe -> [{"content":"<script>alert('SOF');</script>"}] 

Thanks for you help.

Answer 1

I think your h is getting in the way. Try just @data.to_json.html_safe .

For a ton of information about putting HTML in strings in Rails (3), see my blog entry: Presenter Pattern, Rails 3 and HTML Safe . (It's still useful even if you don't care about the presenter pattern).