rails/rails — pull request #8235 by tilsammans (2012-11-16 08:18:14+00:00)
Title: Introduce `ActionView::Template::Handlers::ERB.escape_whitelist`

This is a list of mime types where template text is not html escaped
by default. It prevents `Jack & Joe` from rendering as
`Jack & Joe` for the whitelisted mime types. The default whitelist
contains text/plain.

This follows a whitelist approach where plain text templates are
not escaped, and all the others (json, xml) are. The mime type is
assumed to be set by the abstract controller.