fix security issue

[selectricity] / app / views / voter / full_vote.rhtml

diff --git a/app/views/voter/full_vote.rhtml b/app/views/voter/full_vote.rhtml
index 5534090db12f11b5c38311dfb838e9854f98a92e..be4f7bea7e400eaa4e0f6e688f0d39c61432f78d 100644 (file)
--- a/app/views/voter/full_vote.rhtml
+++ b/app/views/voter/full_vote.rhtml
@@ -1,15 +1,17 @@
 <div id="title-header">
-  <span class="header">Vote Recorded</span>
-  <span class="subheader"></span>
+  <span class="header">Vote</span>
+  <span class="subheader"><%= @voter.election.name %></span>
 </div>
 
 <p><strong>Description:</strong></p>
 <p><%= @voter.election.description %></p>
 
+<% if @voter.election.authenticated? %>
 <div class="normal-header">
   <span class="header">Current Voter</span>
   <span class="subheader"></span>
 </div>
+<% end %>
 
 <p><strong><%= @voter.email %></strong></p>
 
@@ -18,9 +20,10 @@
   <span class="subheader"></span>
 </div>
 
-<p>Drag and drop the items on <strong>list in the right column</strong>
+<p>Drag and drop the items on <strong>list in the left column</strong>
 until they are in order from most preferred at the top to least
-preferred at the bottom. When you are done, press confirm to record your
+preferred at the bottom. When you are done, press the 'Submit Vote'
+button at the bottom of the left column to record your
 vote.</p>
 
 <div class="normal-header">
@@ -30,12 +33,10 @@ vote.</p>
 
 <% @voter.election.candidates.each do |candidate| %>
   <% @current_candidate = candidate %>
-
   <div id="cand<%= @current_candidate.id %>">
-  <h3><%=h @current_candidate.name -%></h3>
-      <blockquote>
-      <%=h (@current_candidate.description) %>
-      </blockquote>
+  <h3><%= h @current_candidate.name %></h3>
+  <%= render :partial => 'election/candidate_box_info' %>
   </div>
     <% end %>
 </ul>
+