XSS - Cross Site Scripting

http://weblog.techno-weenie.net/2006/9/3/white-listing-plugin-for-rails