Mercurial > urweb
view tests/naughty.ur @ 1710:540df112ff62
Remove string-valued style attribute, which may allow injection attacks
author | Adam Chlipala <adam@chlipala.net> |
---|---|
date | Sun, 15 Apr 2012 12:40:53 -0400 |
parents | deeeb036c8ed |
children |
line wrap: on
line source
fun main () : transaction page = if naughtyDebug "hello" = 0 then return <xml><body></body></xml> else error <xml>Uhoh!</xml> (*fun main () : transaction page = let val a = naughtyDebug "" in return <xml><body></body></xml> end*)