Ur/Web: tests/sendurl.ur annotate

Remove string-valued style attribute, which may allow injection attacks

author	Adam Chlipala <adam@chlipala.net>
date	Sun, 15 Apr 2012 12:40:53 -0400
parents	82ac88b4e0a7
children

rev	line source
adamc@1108	1 fun main () =
adamc@1108	2 let
adamc@1108	3 fun getIt () = return (bless "http://www.yahoo.com/")
adamc@1108	4 in
adamc@1108	5 s <- source <xml/>;
adamc@1108	6 return <xml><body>
adamc@1108	7 <dyn signal={signal s}/>
adamc@1108	8
adamc@1108	9 <button onclick={v <- rpc (getIt ()); set s <xml><a href={v}>Go!</a></xml>}/>
adamc@1108	10 </body></xml>
adamc@1108	11 end

Mercurial > urweb