module ERB::Util

def html_escape(s)

# => is a > 0 & a < 10?
puts html_escape('is a > 0 & a < 10?')

<%=h @person.name %>
In your ERB templates, use this method to escape any unsafe content. For example:

This method is also aliased as h.
A utility method for escaping HTML tag characters.
def html_escape(s)
  unwrapped_html_escape(s).html_safe
end