Use of ra开发者_如何学Goils 3 recaptcha. In view _form.html.erb insert <%= recaptcha_tags %> But when viewing the page in the browser receives
<script type="text/javascript" src="http://api.recaptcha.net/challenge?k=**&error=expression"></script>
As I understand it is not rendered in the browser. Why '<' instead of < ?
Try <%= raw recaptcha_tags %>
. Or use html_safe
inside helper.
Explanation here: http://asciicasts.com/episodes/204-xss-protection-in-rails-3
精彩评论