Files
grecia/app/views/verification/residence/new.html.erb
Javi Martín 6b1864fbcd Sanitize translations instead of using _html
Using the `_html` suffix in an i18n key is the same as using `html_safe`
on it, which means that translation could potentially be used for XSS
attacks.
2019-10-09 19:46:47 +02:00

94 lines
3.5 KiB
Plaintext

<div class="verification account row">
<% track_event(category: "verification", action: "start_census") %>
<div class="small-12 column">
<div class="text-center">
<div class="small-4 column verification-step is-active">
<span class="number">1</span> <%= t("verification.step_1") %>
</div>
<div class="small-4 column verification-step">
<span class="number">2</span> <%= t("verification.step_2") %>
</div>
<div class="small-4 column verification-step">
<span class="number">3</span> <%= t("verification.step_3") %>
</div>
</div>
<div class="progress small-12 success">
<span class="meter" style="width: 33%"></span>
</div>
<%= back_link_to account_path, t("verification.back") %>
<h1><%= t("verification.residence.new.title") %></h1>
<div class="user-permissions small-12">
<p><%= t("verification.user_permission_info") %></p>
<ul>
<li><span class="icon-check"></span>&nbsp;<%= t("verification.user_permission_debates") %></li>
<li><span class="icon-check"></span>&nbsp;<%= t("verification.user_permission_proposal") %></li>
<li><span class="icon-check"></span>&nbsp;<%= t("verification.user_permission_support_proposal") %></li>
<li><span class="icon-x"></span>&nbsp;<%= t("verification.user_permission_votes") %></li>
</ul>
</div>
<%= form_for @residence, as: "residence", url: residence_path do |f| %>
<%= render "errors" %>
<div class="row">
<div class="small-12 medium-8">
<div class="small-12 medium-3 column">
<%= f.select :document_type, document_types, prompt: "" %>
</div>
<div class="small-12 medium-5 column end">
<div class="inline-block">
<%= f.label t("verification.residence.new.document_number") %>
</div>
<div class="inline-block" data-toggle="info-document-number">
<span class="icon-help"></span>
<span class="show-for-sr"><%= t("verification.residence.new.document_number_help_title") %></span>
</div>
<div class="dropdown-pane" id="info-document-number" data-dropdown
data-hover="true" data-hover-pane="true">
<%= sanitize(t("verification.residence.new.document_number_help_text")) %>
</div>
<%= f.text_field :document_number, label: false %>
</div>
</div>
</div>
<div class="date-of-birth small-12 medium-6 clear">
<%= f.date_select :date_of_birth,
prompt: true,
start_year: 1900, end_year: minimum_required_age.years.ago.year %>
</div>
<div class="small-12 medium-5 clear">
<%= f.text_field :postal_code,
hint: t("verification.residence.new.postal_code_note") %>
</div>
<div class="small-12">
<%= f.check_box :terms_of_service,
title: t("verification.residence.new.accept_terms_text_title"),
label: t("verification.residence.new.accept_terms_text",
terms_url: link_to(t("verification.residence.new.terms"), "/census_terms",
title: t("shared.target_blank"),
target: "_blank")
) %>
</div>
<div class="small-12 medium-3 clear">
<%= f.submit t("verification.residence.new.verify_residence"),
id: "new_residence_submit",
class: "button success expanded" %>
</div>
<% end %>
</div>
</div>