@scotdalton You're absolutely right about the html injection vulnerability. However, it looks like the person I borrowed this code from was just going over the top, which I know a lot of people did after the upgrade to Rails 3, getting frustrated with broken old code. But since the helper function actually uses the `link_to` rails helpers the html_safe is overkill and I will remove them.