X-Git-Url: https://projects.mako.cc/source/selectricity/blobdiff_plain/c933ff40da110253bc4c474d9c79c3a4ed98721d..6aacfa3b17f012fbdaa191a89af9fc51d7250d79:/app/views/election/_winner.rhtml

diff --git a/app/views/election/_winner.rhtml b/app/views/election/_winner.rhtml
index 531e0d2..0e55aa2 100644
--- a/app/views/election/_winner.rhtml
+++ b/app/views/election/_winner.rhtml
@@ -6,7 +6,7 @@
 
   <ul>
   <% for candidate in @winners %>
-    <li><%= @candidates_by_id[candidate].name %></li>
+    <li><%=h @candidates_by_id[candidate].name %></li>
   <% end %>
   </ul>
 
@@ -14,7 +14,7 @@
 
   <% winner = @winners[0] %>
   <p>The winner of the election was:
-     <strong><%= @candidates_by_id[winner].name %></strong>
+     <strong><%=h @candidates_by_id[winner].name %></strong>
   </p>
 
 <% end %>