README

= Aqueduct

+Aqueduct+ performs sandboxing on HTML, CSS and Embeds. 

To install, do:

script/plugin install git@github.com:namor/aqueduct.git

== HTML sandboxing

* Append something in front of id's
* Rails sanitization: Removes bad HTML with Rails's built-in sanitize method. Bad tags are removed completely, including their content.

== Usage

 class Comment < ActiveRecord::Base
   html_sanitizer :field_name, :append => "sandbox"   #=> id's will be appended with sandbox_
 end



== CSS sandboxing
== Usage

 class Comment < ActiveRecord::Base
   css_sanitizer :field_name, :append => "network_"  #=> CSS selectors will be appended with #network_
 end


== Unique features

* Rails 2.1-ready.
* It works with migrations. Columns are fetched when model is saved, not when the class is loaded.

== TODO
* Option to prevent XML namespaced tags from being stripped
* Dynamic :append option

== Credits

== License

MIT License, just like Rails