fix security issue

[selectricity] / app / views / layouts / frontpage.rhtml

diff --git a/app/views/layouts/frontpage.rhtml b/app/views/layouts/frontpage.rhtml
index fd9817021dd781697691ab2faece924e69894faf..81c77dc014995599a07cfe78dde15d1a10af326c 100644 (file)
--- a/app/views/layouts/frontpage.rhtml
+++ b/app/views/layouts/frontpage.rhtml
@@ -13,27 +13,27 @@
     <div id="header">
       <div id="top-bar">
        <% if session[:user]%>
     <div id="header">
       <div id="top-bar">
        <% if session[:user]%>

-       <%= link_to User.find(session[:user]).login.capitalize,
+       <%= link_to User.find(session[:user]).login.downcase,

                   :controller => "account",
                   :action => "summary", :id => session[:user][:id] %>
                   :controller => "account",
                   :action => "summary", :id => session[:user][:id] %>

-       &nbsp;&nbsp;<%= link_to( 'Log out', :controller => 'account', 
+       &nbsp;&nbsp;<%= link_to( 'log out', :controller => 'account', 

                        :action => 'logout' )%>
        <% else %>
       <%= link_to("login", :controller => "account", :action => "login")
       %>
       &nbsp;&nbsp;<%= link_to "sign up", :controller => "account", 
                        :action => 'logout' )%>
        <% else %>
       <%= link_to("login", :controller => "account", :action => "login")
       %>
       &nbsp;&nbsp;<%= link_to "sign up", :controller => "account", 

-                                :action => "signup" %>
+                                :action => "signup" %> 

     <% end -%>
       &nbsp;&nbsp;<%= link_to "help/about", :controller => 'about' %>
       </div>
     <% end -%>
       &nbsp;&nbsp;<%= link_to "help/about", :controller => 'about' %>
       </div>

-         <a href="index.html"><h1>selectricity: voting machinery for the masses</h1></a>
+         <a href="/"><h1>selectricity: voting machinery for the masses</h1></a>

     </div>
   
   <div id="body">
     <%= @content_for_layout %>
   </div>
   
     </div>
   
   <div id="body">
     <%= @content_for_layout %>
   </div>
   

-  <%= render_partial 'layouts/footer' %>
+  <%= render :partial => 'layouts/footer' %>

 </div>
 </body>
 
 </div>
 </body>