What is the meaning of "h" in "<%=h [ ...] %>"?

neezer_32154 0
Viewed 27967

When I generate a default scaffold, the display tags on show.html.erb have

<%=h @broker.name %>

I know the difference between <% and <%=. What's the "h" do?

templates ruby-on-rails ruby
6 Answers

html escape. It's a method that converts things like < and > into numerical character references so that rendering won't break your html.

Truesdell_134330

<%=h is actually 2 things happening. You're opening an erb tag (<%=) and calling the Rails method h to escape all symbols.

These two calls are equivalent:

<%=h person.first_name %>
<%= h(person.first_name) %>

The h method is commonly used to escape HTML and Javascript from user-input forms.

Admin1

h is a method alias for html_escape from the ERB::Util class.

user_380210

There is also a method in Rack to escape HTML Rack::Utils.escape_html in case you are in Metal and want to escape some HTML.

user_577740
Related