Shopify uses Liquid for this. It's simple to use, and you don't have the danger of users entering any valid ruby code that gets blindly evaled.
Keep up to date with Rails on Twitter and This Week in Rails
Policies: Conduct, License, Maintenance, Security, Trademarks