X-Git-Url: https://projects.mako.cc/source/selectricity-live/blobdiff_plain/fc0a6a8d7ea15bcdb27ebdd58721401c7045c6e0..f2ac11cbeb49cbccd62da51c31e14a8de1a6d26c:/app/views/quickvote/_candidate_list.rhtml

diff --git a/app/views/quickvote/_candidate_list.rhtml b/app/views/quickvote/_candidate_list.rhtml
old mode 100755
new mode 100644
index f4f1c06..9ccb3b1
--- a/app/views/quickvote/_candidate_list.rhtml
+++ b/app/views/quickvote/_candidate_list.rhtml
@@ -1,18 +1,17 @@
-<% %>
 <!-- the list of candidates -->
-<% if @flash[:candlist] %>
+<% if flash[:candidate_names] %>
   <ul>
-  <% for cand in @flash[:candlist] %>
-    <li><%= cand.capitalize %></li>
+  <% for cand in flash[:candidate_names] %>
+    <li><%= white_list(cand.capitalize) %></li>
   <% end %>
   </ul>
 <% end %>
 
-<%= form_remote_tag :update => 'candlist',
+<% form_remote_tag(:update => 'candidate_names',
                     :url => { :action => 'add_candidate' },
-		    :complete => "Field.focus('ajax_newcandidate')" %>
+		    :complete => "Field.focus('ajax_newcandidate')") do %>
 <p>
   <%= text_field "ajax", "newcandidate", :size => 40 %>
   <%= submit_tag "Add(+)" %>
 </p>
-<%= end_form_tag %>
+<% end %>