fix security issue

[selectricity-live] / app / views / voter / thanks.rhtml

diff --git a/app/views/voter/thanks.rhtml b/app/views/voter/thanks.rhtml
index c68e22bc0046ee7ec95abe5c291d12a6f6bd310b..84054d6814a97ddc15c2bbeeecbedfecf180c3f7 100644 (file)
--- a/app/views/voter/thanks.rhtml
+++ b/app/views/voter/thanks.rhtml
@@ -6,6 +6,7 @@
 <p>Your vote has been recorded for the <strong><%= @voter.election.name
 %></strong>.</p>
 
+<% if @voter.election.verifiable %>
 <p>Your unique token for this vote is: <strong><%= @voter.vote.token %></strong></p>
 
 <p>Please record this token for your records and keep it secret. This is
@@ -13,6 +14,7 @@
 end of the election, you will be able to use this token to verify that
 your vote was used in the election and that your vote was recorded
 correctly.</p>
+<% end %>
 
 <% if @voter.election.kiosk? and params[:kiosk] == 'true' %>