fix security issue

[selectricity-live] / app / views / voter / thanks.rhtml

<div id="title-header">
  <span class="header">Vote Recorded</span>
  <span class="subheader"></span>
</div>

<p>Your vote has been recorded for the <strong><%= @voter.election.name
%></strong>.</p>

<% if @voter.election.verifiable %>
<p>Your unique token for this vote is: <strong><%= @voter.vote.token %></strong></p>

<p>Please record this token for your records and keep it secret. This is
<strong>not</strong> the same token that you received in email. At the
end of the election, you will be able to use this token to verify that
your vote was used in the election and that your vote was recorded
correctly.</p>
<% end %>

<% if @voter.election.kiosk? and params[:kiosk] == 'true' %>

<p>Please click the done button below when finished to reset the system
for the next voter.</p>

<%= button_to "Done", :action => "kiosk_ready", :id => @password, :kiosk => true  %>

<% end %>