jumph4x/canonical-rails — pull request #9 by thinkswan (2014-03-12 15:07:28+00:00)
Title: Escape whitelisted query parameters

- Query params are not escaped, so if quotes are present in the params, the output resembles: `` (breaks the HTML)
- Escaping the params produces: ``
- `require 'cgi'` is unnecessary because Rails already requires that library, but I've included it to be explicit (Ruby will simply skip it since it's already loaded)
- Added a test to ensure query params are escaped

Shoot any questions my way. Cheers!