How To Protect Your Rails Apps Against Cross Site Scripting Attacks - The attached file (html_escaper.rb) makes it easy to protect your Ruby on Rails applications from these attacks