fix security issue

[selectricity] / app / views / voter / full_vote.rhtml

diff --git a/app/views/voter/full_vote.rhtml b/app/views/voter/full_vote.rhtml
index 599308f795d30830327d9dfbf4a787e42023d344..be4f7bea7e400eaa4e0f6e688f0d39c61432f78d 100644 (file)
--- a/app/views/voter/full_vote.rhtml
+++ b/app/views/voter/full_vote.rhtml
@@ -1,5 +1,42 @@
-<% %>
+<div id="title-header">
+  <span class="header">Vote</span>
+  <span class="subheader"><%= @voter.election.name %></span>
+</div>

 
 

-<%= render_partial 'vote' %>
+<p><strong>Description:</strong></p>
+<p><%= @voter.election.description %></p>

 
 

+<% if @voter.election.authenticated? %>
+<div class="normal-header">
+  <span class="header">Current Voter</span>
+  <span class="subheader"></span>
+</div>
+<% end %>
+
+<p><strong><%= @voter.email %></strong></p>
+
+<div class="normal-header">
+  <span class="header">Instructions</span>
+  <span class="subheader"></span>
+</div>
+
+<p>Drag and drop the items on <strong>list in the left column</strong>
+until they are in order from most preferred at the top to least
+preferred at the bottom. When you are done, press the 'Submit Vote'
+button at the bottom of the left column to record your
+vote.</p>
+
+<div class="normal-header">
+  <span class="header">Candidate List</span>
+  <span class="subheader"></span>
+</div>
+
+<% @voter.election.candidates.each do |candidate| %>
+  <% @current_candidate = candidate %>
+  <div id="cand<%= @current_candidate.id %>">
+  <h3><%= h @current_candidate.name %></h3>
+  <%= render :partial => 'election/candidate_box_info' %>
+  </div>
+    <% end %>
+</ul>