Question

I have params that is returning 4, 36, 'new tag', 52, 'Mcdonald\'s', 25 as a string.

I then split them by , and then i need to do some work on them.

First, I need to create a new tag based on that, but i need to somehow gsub (or something?) the outside quotes, but not the inner ones (if the tag contains it, like McDonald’s above)

Second, I need to unescape the \ that the token input adds. I’m not sure how to do that second step so its the best security-wise

PS. I have validations on that model so I’m hoping that’s good enough and i dont have to worry about some kind of SQL injection thing

Answer 1

params.split(/,\s+/).map{|s| s.start_with?("'") && s.end_with?("'") ? s[1..-2] : s }

That should clear up the first part about quotes.