Add a bunch of fixes to HTML escaping, and a test case for it

[selectricity-live] / app / views / election / _overview_form.rhtml

diff --git a/app/views/election/_overview_form.rhtml b/app/views/election/_overview_form.rhtml
index 899f00b72129407ea5192306703789e7f3461ff9..d5d7b6cde07e4a4d1ee96146d6d0ec41213f0b16 100644 (file)
--- a/app/views/election/_overview_form.rhtml
+++ b/app/views/election/_overview_form.rhtml
@@ -1,11 +1,11 @@
 <%= error_messages_for 'election' %>
 
 <!--[form:election]-->
-<p><label for="election_name">Name</label><br/>
-<%= text_field 'election', 'name'  %></p>
+<p><label for="election_name">Summary</label><br/>
+<%= text_field 'election', 'name', :size => 60 %></p>
 
 <p><label for="election_description">Description</label><br/>
-<%= text_area 'election', 'description'  %></p>
+<%= text_area 'election', 'description', :rows => 5, :cols => 60 %></p>
 
 <!--
 <p><label for="election_anonymous">Anonymous Vote</label>
@@ -16,7 +16,8 @@
 --> 
 
 <p>Election End Date<br />
-<%= datetime_select :election, :enddate %></p>
+<font size="-1"><em>All elections end at 23:59.</em></font><br />
+<%= date_select :election, :enddate %></p>
 
 <!--[eoform:election]-->