annotate tests/attrs_escape.ur @ 1710:540df112ff62

Remove string-valued style attribute, which may allow injection attacks
author Adam Chlipala <adam@chlipala.net>
date Sun, 15 Apr 2012 12:40:53 -0400
parents 71bafe66dbe1
children
rev   line source
adamc@106 1 val main = fn () => <html><body>
adamc@106 2 <font face="\"Well hey\"
adamc@106 3 Wow">Welcome</font>
adamc@106 4 </body></html>