Security Article Part 3 - 11

data_helper.rb

module DataHelper
  # Expects a nested array such as:
  #   [[1,'Jez','iHiD'], [2,'Bob','<b>xyz</b>']]
  #
  # and outputs:
  #   <table>
  #     <tr><td>1</td><td>Jez</td><td>iHiD</td></tr>
  #     <tr><td>2</td><td>Bob</td><td>&lt;b&gt;xyz&lt;/b&gt;</td></tr>
  #   </table>
  def data_to_table(data)
    output = "<table>"
    data.each do |row|
      output << "<tr>"
      row.each do |cell|
        output << "<td>#{cell}</td>"
      end
      output = "</tr>"  
    end
    output << "</table>"
    output.html_safe
  end
end