# store the candidate grabbed through ajax and stored in flash
@quickvote.candidatelist = flash[:candlist]
-
+ @quickvote.description=CGI.escapeHTML(@quickvote.description)
# try to save, if it fails, show the page again (the flash should
# still be intact
if @quickvote.save
candidate_name = CGI.escapeHTML(params[:ajax][:newcandidate])
unless candidate_name.strip.empty?
if flash.has_key?(:candlist) and flash[:candlist].instance_of?(Array)
- flash[:candlist] << candidate_name
+ flash[:candlist] << candidate_name unless flash[:candlist].index(candidate_name)
else
flash[:candlist] = [ candidate_name ]
end