fix security issue

[selectricity-live] / app / views / voter / thanks.rhtml

diff --git a/app/views/voter/thanks.rhtml b/app/views/voter/thanks.rhtml
index 7562c61681faef0b4d03f3f0c36062dad0495d8d..84054d6814a97ddc15c2bbeeecbedfecf180c3f7 100644 (file)
--- a/app/views/voter/thanks.rhtml
+++ b/app/views/voter/thanks.rhtml
@@ -6,6 +6,7 @@
 <p>Your vote has been recorded for the <strong><%= @voter.election.name
 %></strong>.</p>
 
 <p>Your vote has been recorded for the <strong><%= @voter.election.name
 %></strong>.</p>
 

+<% if @voter.election.verifiable %>

 <p>Your unique token for this vote is: <strong><%= @voter.vote.token %></strong></p>
 
 <p>Please record this token for your records and keep it secret. This is
 <p>Your unique token for this vote is: <strong><%= @voter.vote.token %></strong></p>
 
 <p>Please record this token for your records and keep it secret. This is


@@ -13,3 +14,13 @@
 end of the election, you will be able to use this token to verify that
 your vote was used in the election and that your vote was recorded
 correctly.</p>
 end of the election, you will be able to use this token to verify that
 your vote was used in the election and that your vote was recorded
 correctly.</p>

+<% end %>
+
+<% if @voter.election.kiosk? and params[:kiosk] == 'true' %>
+
+<p>Please click the done button below when finished to reset the system
+for the next voter.</p>
+
+<%= button_to "Done", :action => "kiosk_ready", :id => @password, :kiosk => true  %>
+
+<% end %>