Enable automatic html-escaping locally rather than by default.

_autoescaped_partial.html.erb

<% autoescape do %>
  <div>
    <%= content_helper_gets_escaped %>
  </div>
<% end %>

_more_autoescape.html.erb

<%= content_helper_not_escaped %>

  <% autoescape do %>
    <div>
      <%= content_helper_gets_escaped %>
    </div>
    <% autoescape do %>
      <div>
        <%= content_helper_gets_escaped %>
       </div>
    <% end %>
  <% end %>

<%= content_helper_not_escaped %>

_simple_autoescape.html.erb

<% autoescape do %>
  <div>
    <%= content_helper_gets_escaped %>
  </div>
<% end %>

rails_xss

<% autoescape do %>
  <div>
    <%= content_helper_gets_escaped %>
  </div>
<% end %>