view tests/rpcList2.ur @ 1710:540df112ff62

Remove string-valued style attribute, which may allow injection attacks
author Adam Chlipala <adam@chlipala.net>
date Sun, 15 Apr 2012 12:40:53 -0400
parents 553a5cc3a4b5
children
line wrap: on
line source
fun showList l = case l of
    [] => "[]"
  | h :: t => strcat (strcat (show h) " :: ") (showList t)

fun rpcFunc l : transaction string =
  case l of h :: _ => return (showList h) | [] => return "[]"

fun main () : transaction page = return <xml><body>
  <button onclick={
    s <- rpc (rpcFunc  (("foo" :: []) :: []));
    alert s
  }/>
  </body></xml>