-<% %>
<!-- the list of candidates -->
-<% if flash[:candlist] %>
+<% if flash[:candidate_names] %>
<ul>
- <% for cand in flash[:candlist] %>
- <li><%=h cand.capitalize %></li>
+ <% for cand in flash[:candidate_names] %>
+ <li><%= white_list(cand.capitalize) %></li>
<% end %>
</ul>
<% end %>
-<% form_remote_tag(:update => 'candlist',
+<% form_remote_tag(:update => 'candidate_names',
:url => { :action => 'add_candidate' },
:complete => "Field.focus('ajax_newcandidate')") do %>
<p>