Enable Rails/OutputSafety cop
Rubocop 41 added a cop that checks for uses of raw
and .html_safe
, which shouldn't be used unless necessary for security reasons.
A lot of them can be replaced using content_tag
or safe_join
.
See the PR for more information: https://github.com/bbatsov/rubocop/pull/3135