views:

22

answers:

1

I have an option for people to store an embed link to Vimeo or YouTube as part of their profile. I'm storing it in an embed_link:string in my DB. What do I need to be careful of so people only post those links and not dangerous javascript or anything else?

A: 

I think this might answer your question: http://stackoverflow.com/questions/1970903/only-allow-video-embed-codes-rails

Galen