The h method you use in a Ruby on Rail View, isn’t available in a model or in a controller.
That’s very frustrating. An alternative method to use is:


CGI::escapeHTML( string_to_escape )