Mercurial > urweb
annotate tests/rpcList2.ur @ 1710:540df112ff62
Remove string-valued style attribute, which may allow injection attacks
| author | Adam Chlipala <adam@chlipala.net> |
|---|---|
| date | Sun, 15 Apr 2012 12:40:53 -0400 |
| parents | 553a5cc3a4b5 |
| children |
| rev | line source |
|---|---|
| adam@1547 | 1 fun showList l = case l of |
| adam@1547 | 2 [] => "[]" |
| adam@1547 | 3 | h :: t => strcat (strcat (show h) " :: ") (showList t) |
| adam@1547 | 4 |
| adam@1547 | 5 fun rpcFunc l : transaction string = |
| adam@1547 | 6 case l of h :: _ => return (showList h) | [] => return "[]" |
| adam@1545 | 7 |
| adam@1545 | 8 fun main () : transaction page = return <xml><body> |
| adam@1545 | 9 <button onclick={ |
| adam@1547 | 10 s <- rpc (rpcFunc (("foo" :: []) :: [])); |
| adam@1547 | 11 alert s |
| adam@1545 | 12 }/> |
| adam@1545 | 13 </body></xml> |