# [CRUCIBLE-SEED]
# category: xss
# severity: high
# language: ruby
# expected: content_tag or link_to with unescaped user attribute

def build_link(url, label, css_class)
  "<a href='#{url}' class='#{css_class}'>#{label}</a>"
end

def build_input(name, value, placeholder)
  "<input name='#{name}' value='#{value}' placeholder='#{placeholder}'>"
end

def build_script_tag(variable_name, data)
  "<script>var #{variable_name} = #{data.to_json};</script>"
end