escape_once uses negative lookahead to avoid double-escaping instead of a second gsub

git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7606 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
This commit is contained in:
Jeremy Kemper
2007-09-24 05:43:59 +00:00
parent cb5b8a7f05
commit e711d8fade

View File

@@ -94,7 +94,7 @@ module ActionView
# escape_once("<< Accept & Checkout")
# # => "<< Accept & Checkout"
def escape_once(html)
fix_double_escape(html_escape(html.to_s))
html.to_s.gsub(/[\"><]|&(?!([a-zA-Z]+|(#\d+));)/) { |special| ERB::Util::HTML_ESCAPE[special] }
end
private
@@ -116,11 +116,6 @@ module ActionView
end
end
# Fix double-escaped entities, such as &amp;amp;, &amp;#123;, etc.
def fix_double_escape(escaped)
escaped.gsub(/&amp;([a-z]+|(#\d+));/i) { "&#{$1};" }
end
def block_is_within_action_view?(block)
eval("defined? _erbout", block.binding)
end