Mercurial > urweb
annotate tests/cselect.ur @ 1710:540df112ff62
Remove string-valued style attribute, which may allow injection attacks
| author | Adam Chlipala <adam@chlipala.net> |
|---|---|
| date | Sun, 15 Apr 2012 12:40:53 -0400 |
| parents | 9330ba3a2799 |
| children |
| rev | line source |
|---|---|
| adamc@797 | 1 fun main () = |
| adamc@797 | 2 s <- source ""; |
| adamc@797 | 3 return <xml><body> |
| adamc@799 | 4 <cselect source={s} onchange={v <- get s; alert ("Now it's " ^ v)}> |
| adamc@797 | 5 <coption>Wilbur</coption> |
| adamc@797 | 6 <coption>Walbur</coption> |
| adamc@797 | 7 </cselect> |
| adamc@797 | 8 |
| adamc@797 | 9 Hello, I'm <dyn signal={s <- signal s; return <xml>{[s]}</xml>}/>. |
| adamc@797 | 10 I'll be your waiter for this evening. |
| adamc@797 | 11 </body></xml> |