X-Git-Url: https://projects.mako.cc/source/selectricity-live/blobdiff_plain/a1379415812ddd0e464aa3304b6fbb57ccf3373d..6ea52ab5c0c29ce60f5a8ee2747eb52f47d5b884:/app/views/quickvote/_pref_table.rhtml

diff --git a/app/views/quickvote/_pref_table.rhtml b/app/views/quickvote/_pref_table.rhtml
index 4576a0f..1d3cdf3 100644
--- a/app/views/quickvote/_pref_table.rhtml
+++ b/app/views/quickvote/_pref_table.rhtml
@@ -9,17 +9,17 @@
   <tr>
 	<td> </td>
 	<% candidates.each do |candidate| -%>
-	  <th><%= names[candidate] -%></th>
+	  <th><%=h names[candidate] -%></th>
 	<% end -%>
 <% candidates.each do |winner| -%>
   <tr>
-	<th><%= names[winner] %></th>
+	<th><%=h names[winner] %></th>
   <% candidates.each do |loser| -%> 
     <% if winner == loser -%>
       <td> -- </td>
     <% else %>         
       <td><% wins = @election.condorcet_result.matrix[winner][loser]%>
-          <%= wins %>
+          <%=h wins %>
 	      <%= sparkline_tag [(wins.to_f/voters.to_f)*100.0], :type => 'pie', 
 	                         :diameter => 25, :share_color => '#74ce00' %>
 	  </td>