if you first parse on < and > and sanitize the parts that result from this parsing, you avoid the ERB/HTML tag problem, i.e. change method @description@ to return @sanitize(description)@