Mercurial > urweb
annotate tests/sendurl.ur @ 1241:58f5ac1bb849
Check for implicit flows via expressions injected into SQL
| author | Adam Chlipala <adamc@hcoop.net> |
|---|---|
| date | Thu, 15 Apr 2010 14:21:12 -0400 |
| parents | 82ac88b4e0a7 |
| children |
| rev | line source |
|---|---|
| adamc@1108 | 1 fun main () = |
| adamc@1108 | 2 let |
| adamc@1108 | 3 fun getIt () = return (bless "http://www.yahoo.com/") |
| adamc@1108 | 4 in |
| adamc@1108 | 5 s <- source <xml/>; |
| adamc@1108 | 6 return <xml><body> |
| adamc@1108 | 7 <dyn signal={signal s}/> |
| adamc@1108 | 8 |
| adamc@1108 | 9 <button onclick={v <- rpc (getIt ()); set s <xml><a href={v}>Go!</a></xml>}/> |
| adamc@1108 | 10 </body></xml> |
| adamc@1108 | 11 end |