XSS Protection by Default in Rails 3.0. Fantastic news—congratulations, Rails core team.
Tagged security, ruby, rails, xss