Created a user "summary/profile page". Also corected several minor typos on election...
[selectricity-live] / app / views / quickvote / my_quickvotes.rhtml
index a920480be21a2515272ecf398f91190fd19f10bb..bb388366be9d140706efc30c657054a3779c5355 100644 (file)
                     quickaction_url( :ident => quickvote.name, 
                                      :action => 'results' ) %>
                <% else %>
-                 <%= quickvote.name %>
+                 <%=h quickvote.name %>
                <% end %>
        </td>
-    <td><%= quickvote.startdate.strftime("%x") %></td>
-    <td><%= quickvote.enddate.strftime("%x") %></td>
-       <td><%= quickvote.description %></td>
+    <td><%=h quickvote.startdate.strftime("%x") %></td>
+    <td><%=h quickvote.enddate.strftime("%x") %></td>
+       <td><%=h quickvote.description %></td>
   </tr>
 <% end %>
 </table>       

Benjamin Mako Hill || Want to submit a patch?