module ActionView::Helpers::JavaScriptHelper
Public Instance Methods
escape_javascript(javascript)
click to toggle source
# File lib/legacy-rails-CVE-2020-5267-patch.rb, line 15 def escape_javascript(javascript) javascript = javascript.to_s if javascript.empty? result = "" else result = javascript.gsub(/(\\|<\/|\r\n|\342\200\250|\342\200\251|[\n\r"']|[`]|[$])/u, JS_ESCAPE_MAP) end javascript.html_safe? ? result.html_safe : result end