Mercurial > urweb
view tests/attrs_escape.ur @ 1710:540df112ff62
Remove string-valued style attribute, which may allow injection attacks
author | Adam Chlipala <adam@chlipala.net> |
---|---|
date | Sun, 15 Apr 2012 12:40:53 -0400 |
parents | 71bafe66dbe1 |
children |
line wrap: on
line source
val main = fn () => <html><body> <font face="\"Well hey\" Wow">Welcome</font> </body></html>