Fix the CrossSiteScripting warnings from Brakeman

[rails.git] / app / views / diary_entries / new.html.erb

diff --git a/app/views/diary_entries/new.html.erb b/app/views/diary_entries/new.html.erb
index b1645d5c5296d848fb174366e74a04d80fe9b966..dfe69f22a203e795f93d41d2bd5cd3aceac0aab9 100644 (file)
--- a/app/views/diary_entries/new.html.erb
+++ b/app/views/diary_entries/new.html.erb
@@ -9,39 +9,5 @@
 <%= error_messages_for "diary_entry" %>
 
 <%= form_for @diary_entry do |f| %>
 <%= error_messages_for "diary_entry" %>
 
 <%= form_for @diary_entry do |f| %>

-  <div class="diary_entry standard-form">
-    <fieldset>
-      <div class='form-row'>
-        <label class="standard-label"><%= t ".subject" -%></label>
-        <%= f.text_field :title, :class => "richtext_title" %>
-      </div>
-      <div class='form-row'>
-        <label class="standard-label"><%= t ".body" -%></label>
-        <%= richtext_area :diary_entry, :body, :cols => 80, :rows => 20, :format => @diary_entry.body_format %>
-      </div>
-      <div class='form-row'>
-        <label class="standard-label"><%= t ".language" -%></label>
-        <%= f.collection_select :language_code, Language.order(:english_name), :code, :name %>
-    </div>
-    </fieldset>
-    <fieldset class='location'>
-      <label class="standard-label"><%= t ".location" -%></label>
-      <%= content_tag "div", "", :id => "map", :data => { :lat => @lat, :lon => @lon, :zoom => @zoom } %>
-      <div class='form-row clearfix'>
-        <div class='form-column'>
-          <label class="secondary standard-label"><%= t ".latitude" -%></label>
-          <%= f.text_field :latitude, :size => 20, :id => "latitude" %>
-        </div>
-        <div class='form-column'>
-          <label class="secondary standard-label"><%= t ".longitude" -%></label>
-          <%= f.text_field :longitude, :size => 20, :id => "longitude" %>
-        </div>
-        <div class='form-column'>
-          <a href="#" id="usemap"><%= t ".use_map_link" -%></a>
-        </div>
-      </div>
-    </fieldset>
-
-    <%= submit_tag t("diary_entries.new.publish_button") %>
-  </div>
+  <%= render :partial => "form", :locals => { :f => f } %>

 <% end %>
 <% end %>