title: How to automatically escape HTML in Ruby on Rails?
body: <p>I'm just getting started with RoR (and web development in general).<br><br>I know that when outputting user-supplied data we should escape it with the <code>h()</code> helper.<br><br>
  Is there a way to ensure that all form data (params?) received by an action is guaranteed to be escaped automatically? (I do understand that it's a wise decision to escape HTML when displaying in a view, which I will be doing in any case ).</p>