Star AlbumentationsX on GitHub — it powers this leaderboard
rails/rails_xss
A plugin for rails 2.3 apps which switches the default to escape by default
