Mercurial > urweb
annotate tests/view.ur @ 1241:58f5ac1bb849
Check for implicit flows via expressions injected into SQL
| author | Adam Chlipala <adamc@hcoop.net> |
|---|---|
| date | Thu, 15 Apr 2010 14:21:12 -0400 |
| parents | 8688e01ae469 |
| children |
| rev | line source |
|---|---|
| adamc@754 | 1 table t : { A : int, B : string } |
| adamc@754 | 2 |
| adamc@754 | 3 view v = SELECT t.A AS X FROM t |
| adamc@754 | 4 |
| adamc@754 | 5 fun main () = |
| adamc@754 | 6 rows <- queryX (SELECT * FROM v) |
| adamc@754 | 7 (fn r => <xml><li>{[r.V.X]}</li></xml>); |
| adamc@754 | 8 return <xml><body> |
| adamc@754 | 9 {rows} |
| adamc@754 | 10 </body></xml> |