Mercurial > urweb

view tests/dynClass.ur @ 1710:540df112ff62

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Remove string-valued style attribute, which may allow injection attacks
author Adam Chlipala <adam@chlipala.net>
date Sun, 15 Apr 2012 12:40:53 -0400
parents b0720700c36e
children acadf9d1214a
line wrap: on
line source
style s1
style s2

fun main () : transaction page =
    src <- source s1;
    s <- source "";
    toggle <- source False;
    return <xml>
      <head>
	<link rel="stylesheet" type="text/css" href="http://localhost/test.css"/>
      </head>
      <body>
	<button dynClass={signal src} onclick={set src s2}/>

	<hr/>

	<ctextbox source={s} dynClass={t <- signal toggle;
				       return (if t then s1 else s2)}
        	  onkeyup={fn _ => t <- get toggle; set toggle (not t)}/>
      </body>
    </xml>