Question

Or do you really have to sanitize each field individually? Thanks

Answer 1

You can use the column metadata to loop through each column.

(From http://blog.hulihanapplications.com/browse/view/10-strip-html-in-ruby-on-rails):

class Product < ActiveRecord::Base  

 before_save :strip_html  
 def strip_html # Automatically strips any tags from any string to text typed column  
   include ActionView::Helpers::SanitizeHelper  
   for column in Product.content_columns  
     if column.type == :string || column.type == :text # if the column is text-typed  
       if !self[column.name].nil? # strip html from string if it's not empty  
         self[column.name] = strip_tags(self[column.name])  
       end  
     end  
   end  
 end