Sanitize gem: whitelistベースã®... - YomuKaku Memohtmlã‚¿ã‚°ã‚„scriptã‚¿ã‚°ã‚’å«ã‚€ã‚³ãƒ³ãƒ†ãƒ³ãƒ„をデータベースã‹ã‚‰å–り出ã—ã¦viewã«å‡ºåŠ›ã™ã‚‹å ´åˆã¯ã€å±é™ºãªã‚¿ã‚°ã‚’出力ã—ãªã„よã†ã«ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ 特ã«CMSã®ã‚ˆã†ãªã‚¢ãƒ—リを作æˆã™ã‚‹å ´åˆã¯ã€ã‚¢ãƒ—リを作æˆã—ãŸäººã¨ç•°ãªã‚‹äººãŒã‚³ãƒ³ãƒ†ãƒ³ãƒ„を入力ã§ãã‚‹ãŸã‚ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å…¥åŠ›ã‚’ãã®ã¾ã¾viewã«å‡ºåŠ›ã™ã‚‹ã“ã¨ã¯å±é™ºã§ã™ã€‚ 例ãˆã°ã€ <script type="text/javascript">alert("I'm going to steal your secret.");</script> ã®ã‚ˆã†ãªå…¥åŠ›ã‚’ãã®ã¾ã¾å‡ºåŠ›ã™ã‚‹ã¨ã€å½“該ã®ãƒšãƒ¼ã‚¸ãŒãƒªãƒãƒ¼ãƒ‰ã•ã‚Œã‚‹ãŸã³ã«JavaScriptã®ã‚¢ãƒ©ãƒ¼ãƒˆãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒè¡¨ç¤ºã•ã‚Œã¦ã—ã¾ã„ã¾ã™ã€‚ ã“ã®ã‚ˆã†ãªã“ã¨ã‚’é¿ã‘ã‚‹ãŸã‚ã€ä¸€èˆ¬ã«sanitizeã¨ã„ã†å‡¦ç†ãŒè¡Œã‚ã‚Œã¾ã™ã€‚ フレームワークã§ã‚る程度ã®é¢å€’ã¯ã¿ã¦ã‚‚らãˆã¾ã™ã€‚ Rails 3ã®ActionViewã§ã¯ã€viewã«æ–‡
GitHub - BetterErrors/better_errors: Better error page for Rack apps
Rails開発環境 2012å¤ - AnyType
{{#tags}}- {{label}}
{{/tags}}