Mercurial > urweb
annotate tests/showTime.ur @ 1710:540df112ff62
Remove string-valued style attribute, which may allow injection attacks
| author | Adam Chlipala <adam@chlipala.net> |
|---|---|
| date | Sun, 15 Apr 2012 12:40:53 -0400 |
| parents | 438561303d02 |
| children |
| rev | line source |
|---|---|
| adam@1629 | 1 fun main () : transaction page = |
| adam@1629 | 2 tm <- now; |
| adam@1629 | 3 s <- source tm; |
| adam@1629 | 4 return <xml><body> |
| adam@1629 | 5 <b>Server:</b> {[tm]}<br/> |
| adam@1629 | 6 <b>Client:</b> <dyn signal={v <- signal s; return (txt v)}/> |
| adam@1629 | 7 <button value="Recalculate" onclick={tm <- now; set s tm}/> |
| adam@1629 | 8 </body></xml> |