<tr>
<td>Candidate</td>
<% @election.approval_result.points.keys.sort.each do |candidate| %>
- <th><%=h @names[candidate] %></th>
+ <th><%= white_list(@names[candidate]) %></th>
<% end -%>
</tr>
<td><%= points %></td>
<% end -%>
</tr>
-</table>
\ No newline at end of file
+</table>