HTML escape description to prevent code injection onto page

[selectricity-live] / app / views / quickvote / success.rhtml

diff --git a/app/views/quickvote/success.rhtml b/app/views/quickvote/success.rhtml
index 93d688208b212d7a87f51aff22c5b72feec65a6b..8d2baf6a0e06d579a7c3c08c32553a4caeaefa12 100644 (file)
--- a/app/views/quickvote/success.rhtml
+++ b/app/views/quickvote/success.rhtml
@@ -1,16 +1,16 @@
 <% -%>
-<h2>Your QuickVote Was Created</h2>
+<h2>QuickVote Created</h2>
 
 <p>Please direct voters to:</p>
 
 <blockquote><strong>
-  <%= quickvote_url( :votename => @quickvote.name ) -%>
+  <%= quickvote_url( :ident => @quickvote.name ) -%>
 </strong></blockquote>
 
-<p>This vote will close on <em><%= @quickvote.enddate %></em></p>
+<p>This vote will end on <em><%= @quickvote.enddate.strftime('%A, %B %d, %Y') %></em></p>
 
 <p>QuickVotes are open to the public but are not publicly listed on the
 HyperChad site. Voters do not need to log in or authenticate to
 participate in this election.</p>
 
-<p><%= link_to "Jump to your QuickVote.", quickvote_url( :votename => @quickvote.name ) %></p>
+<p><%= link_to "Jump to QuickVote", quickvote_url( :ident => @quickvote.name ) %></p>