Rails 2.3.7 breaks will_paginate output about will_paginate HOT 7 CLOSED

I think html_safe is not good idea for Rails!just like PHP's magic-quotes-gpc
http://cn2.php.net/manual/en/info.configuration.php#ini.magic-quotes-gpc
In PHP world,magic-quotes-gpc disabled default In the current PHP...

We dont need Rails auto escape <%=post.title%>,but <%=h post.title%>is good.Like php world,dont need php escaped with a backslash automatically

from will_paginate.

I can confirm this issue.

from will_paginate.

Can confirm likewise.

As a temporary fix, patched like so:

http://gist.github.com/411770

from will_paginate.

given that this feature is a rails 3 backport the rails 3 branch of will-paginate probably has some useful bits and pieces on it.

degcat, this isn't really the right place to discuss it, but I'd say it's needed & whitelisting is good.

from will_paginate.

I'm getting undefined method `paginate' when using rails3 branch. Any ideas?

from will_paginate.

I confirm the issue. Appeared with Rails 2.3.7, also available in Rails 2.3.8.
The guilty is the to_html method which doesn't .html_safe the internal html variable.

from will_paginate.

duplicate of #19, but thanks for reporting

from will_paginate.