mirror of
https://github.com/github/rails.git
synced 2026-04-26 03:00:59 -04:00
Revert html_escape to do a single gsub again, but add the "n" flag (no language, i.e. not multi-byte) to protect against XSS via invalid utf8 Signed-off-by: José Valim <jose.valim@gmail.com>