09 - escaping html and javascript for display.rb

O Reilly Ruby Cookbook source code

<%= @data %>
#---
<%=h @data %>
#---
<!-- index.rhtml -->
<script lang="javascript">
var text = "<%= escape_javascript @javascript_alert_text %>";
alert(text);
</script>
#---