escape.rb

class ApplicationController < ActionController::Base
    after_filter :escape_response

    def escape_response
        if response.content_type == 'application/json'
            response.body = escape_hash_or_array(JSON.parse(response.body)).to_json
        end
    end

    #realized that this also creates a new Proc object for every recursive call. Needs to be fixed
    def escape_hash_or_array(hash_or_array)
        escape_value = lambda do |value|
            if value.is_a?(String)
                value = ERB::Util.h(value)
            elsif [Array, Hash].any?{|klass| value.is_a?(klass) }
                value = escape_hash_or_array(value)
            end
        end
        hash_or_array.is_a?(Hash) ? hash_or_array.each_value(&escape_value) : hash_or_array.each(&escape_value)
    end
end