I have Descriptions written in a variety of languages. They work fine when created and when listed.

However, when the Descriptions are to be modified, the <%escape_html Description%> gives a messy bunch of characters, not the writing of another language.

I understand about html, and the risk of XSS attacks.

How can I give my user their Description in their language so they can modify it, without subjecting the site to the risk of XSS attacks?

Thanks,
Tora