我可以在我计划向其他用户显示的用户输入的文本上使用
ActionView::Helpers::SanitizeHelper#sanitize吗?例如,是否正确处理
all cases described on this site?
另外,文档提到:
Please note that sanitizing
user-provided text does not guarantee
that the resulting markup is valid
(conforming to a document type) or
even well-formed. The output may still
contain e.g. unescaped ’<’,’>’,’&’
characters and confuse browsers.