title: Is it safe to put params in a flash notice?
body: <p>Here's my action code in my controller.</p>
  
  <pre><code>def index
    if params[:writer]
      if Article.published.where('writer = ?', params[:writer]).count &lt; 1
        redirect_to articles_url, :notice =&gt; "There are no articles by #{params[:writer]}"
      else
        @articles = Article.published.where('writer = ?', params[:writer]).order('published_at DESC').page(params[:page]).per(20)
      end
    else
      @articles = Article.published.order('published_at DESC').page(params[:page]).per(20)
    end
  end
  </code></pre>
  
  <p>I think the question is fairly obvious. In some simple testing Rails seems to escape that <code>:notice</code> just fine, but I wanted to make sure I wasn't asking for trouble by doing that.</p>