rails/rails — pull request #6355 by amutz (2012-05-16 20:30:05+00:00)
Title: NumberHelper.number_with_delimiter should html_escape both delimiters and separators

Recently, the dependency on safe_join was removed from number_helper. When this happened, delimiters and separators were no longer being html_escaped.

For example, number_with_delimiter(1000, :delimiter =>'') would return "1000" marked html_safe.

This pull request makes both delimiters and separators html_escaped, and adds tests for this behavior.

See https://github.com/rails/rails/commit/ecfb32cd165c0763befb7eed7e348438db928cef for more info

Likely interested parties: @carlosantoniodasilva and @josevalim