From ce9d419305f36937cd8f5d7ba6793ba4dbf6135c Mon Sep 17 00:00:00 2001
From: Benjamin Kellermann <Benjamin.Kellermann@gmx.de>
Date: Wed, 10 Jun 2009 23:38:53 +0200
Subject: validated for xhtml1.1 conformity

---
 poll.rb | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'poll.rb')

diff --git a/poll.rb b/poll.rb
index 784f322..cdf1957 100644
--- a/poll.rb
+++ b/poll.rb
@@ -64,7 +64,7 @@ class Poll
 				when MAYBEVAL
 					value = MAYBE
 				end
-				ret += "<td class='#{klasse}' title='#{participant}: #{columntitle}'>#{value}</td>\n"
+				ret += "<td class='#{klasse}' title=\"#{CGI.escapeHTML(participant)}: #{columntitle}\">#{value}</td>\n"
 			}
 			ret += "<td class='date'>#{poll['timestamp'].strftime('%d.%m, %H:%M')}</td>"
 			ret += "</tr>\n"
@@ -184,7 +184,7 @@ COMMENT
 			<div>
 				<fieldset>
 					<legend>
-						<input value='anonymous' type='text' name='commentname' size='9ex' /> says&nbsp;
+						<input value='anonymous' type='text' name='commentname' size='9' /> says&nbsp;
 					</legend>
 					<textarea cols='50' rows='7' name='comment' ></textarea>
 					<br /><input type='submit' value='Submit comment' />
-- 
cgit v1.2.3