<table class="voterbox">
<% victories.keys.each do |victor| %>
<tr>
- <th><%= names[victor] %></th>
+ <th><%=h names[victor] %></th>
<% victories[victor].keys.each do |loser| %>
- <td><%= names[loser] %> (<%= victories[victor][loser] %>)</td>
+ <td><%=h names[loser] %> (<%= victories[victor][loser] %>)</td>
<% end -%>
</tr>
<% end -%>