CGI.escape_html seems more performant.
@@ -6,7 +6,7 @@
<% @fortunes.each do |fortune| %>
<tr>
<td><%= fortune.id %></td>
- <td><%= Rack::Utils.escape_html(fortune.message) %></td>
+ <td><%= CGI.escape_html(fortune.message) %></td>
</tr>
<% end %>
</table>