存储安全HTML

Question

我想下载一个网址列表，并将它们存储在数据库(Mysql)中。我怎样才能做出安全的htmls呢？我能用什么代替

safe_html = make_safe_it(html) # HERE

在下面的代码里？

require 'mysql2'
require 'open-uri'

HOST = "..."
USER = "..."
PASS = "..."

@client = Mysql2::Client.new(:host=> HOST,:username=>USER,:password => PASS)
@client.query "USE db_test"
@client.query("SELECT id,url from pages").each{ |row|
   html = open(row["url"]).read
   safe_html = make_safe_it(html) # HERE
   @client.query("UPDATE pages SET html = #{safe_html} where id = #{row["id"]} ")
}

Answer 1

如https://github.com/brianmario/mysql2中所建议的使用escaped = client.escape("gi'thu\"bbe\0r's")