Mercurial > urweb
view tests/dynTable.ur @ 1710:540df112ff62
Remove string-valued style attribute, which may allow injection attacks
author | Adam Chlipala <adam@chlipala.net> |
---|---|
date | Sun, 15 Apr 2012 12:40:53 -0400 |
parents | ade93cd5bc59 |
children | d2383ffc18ab |
line wrap: on
line source
fun main () : transaction page = s <- source <xml/>; s1 <- source <xml/>; n <- source 0; return <xml><body> <table> <dyn signal={signal s}/> <tr> <td>Hi</td> </tr> </table> <button onclick={v <- get n; set n (v + 1); set s <xml><tr> <td>Whoa!({[v]})</td> </tr></xml>}/> <table> <tr> <dyn signal={signal s1}/> </tr> <tr> <td>Hi!</td> </tr> </table> <button onclick={set s1 <xml><td>Whoa!</td></xml>}/> </body></xml>