Have Geek Brain

How do I echo a GET variable inside Rails?

I've created an iFrame component to integrate into my sites. The IFrame needs to be passed the GET variable from the URL string when the page is loaded on the remote site. In this case, the parent page will be named http://www.theirsite.com/tracking=12345 and the tracking variable must be written to the html code on the remote page for the iframe when the page is rendered.

I've created code versions for every major language except rails. The PHP code version is shown below.

As a complete Rails neophyte, I hope someone can generate a similar XSS protected Rails snippet like htmlentities ().

I am posting code for people to grab and copy to their sites.

... src="mysite.com?tracking=<?php echo htmlentities($_GET['tracking']); ?>" ...
0


a source to share


2 answers


The hash params

contains a collection of all GET and POST variables:

... src="mysite.com?tracking=<%= CGI::escape(params[:tracking]) %>" ...


The function CGI:escape()

encodes a parameter for a URL and can help prevent XSS attacks.

+1


a source


If you need to specifically get a variable, you can do it like this:



... src = "mysite.com?tracking=<% = request.GET [" tracking "]%>"

+1


a source






More articles:


All Articles