When I generate a default scaffold, the display tags on show.html.erb have
<%=h @broker.name %>
I know the difference between &
&
h is a method alias for html_escape from the ERB::Util class.
h
html_escape