script to find rails 3 xss issues

xss_finder.rb

# run from rails root

Dir.glob("app/views/**/*.*").each do |filename|
  File.open(filename) do |f|
    f.each_with_index do |line, i|
      line.scan /[^"]"([^"]+)"/ do |match|
        m = match.first
        puts "#{f.path} :#{i+1} #{m}" if m =~ /(<[^%]|[^=%]>)/
      end
    end
  end
end