Sanitize any user supplied HTML before doing link detection or the

[rails.git] / app / helpers / application_helper.rb

diff --git a/app/helpers/application_helper.rb b/app/helpers/application_helper.rb
index 22a7940eb213fec161352153800c9c6948c8b43c..e10650ada1fa3cde95956725f5e679f146446156 100644 (file)
--- a/app/helpers/application_helper.rb
+++ b/app/helpers/application_helper.rb
@@ -1,3 +1,49 @@
-# Methods added to this helper will be available to all templates in the application.
 module ApplicationHelper
+  def htmlize(text)
+    return auto_link(sanitize(simple_format(text)), :link => :urls, :html => { :rel => "nofollow" })
+  end
+
+  def html_escape_unicode(text)
+    chars = ActiveSupport::Multibyte::Chars.u_unpack(text).map do |c|
+      c < 127 ? c.chr : "&##{c.to_s};"
+    end
+
+    return chars.join("")
+  end
+
+  def rss_link_to(*args)
+    return link_to(image_tag("RSS.gif", :size => "16x16", :border => 0), Hash[*args], { :class => "rsssmall" });
+  end
+
+  def atom_link_to(*args)
+    return link_to(image_tag("RSS.gif", :size => "16x16", :border => 0), Hash[*args], { :class => "rsssmall" });
+  end
+
+  def javascript_strings
+    js = ""
+
+    js << "<script type='text/javascript'>\n"
+    js << "i18n_strings = new Array();\n"
+    js << javascript_strings_for_key("javascripts")
+    js << "</script>\n"
+
+    return js
+  end
+
+private
+
+  def javascript_strings_for_key(key)
+    js = ""
+    value = t(key, :locale => "en")
+
+    if value.is_a?(String)
+      js << "i18n_strings['#{key}'] = '" << escape_javascript(t(key)) << "';\n"
+    else
+      value.each_key do |k|
+        js << javascript_strings_for_key("#{key}.#{k}")
+      end
+    end
+
+    return js
+  end
 end