rails_xss. A plugin for rails 2.3.5 applications which switches the default to escape by default. Later versions should use rails/rails_xss