XSS Protection by Default in Rails 3.0. Fantastic news—congratulations, Rails core team.
Tagged rails, ruby, security, xss