Mercurial > urweb
view tests/snest.ur @ 1710:540df112ff62
Remove string-valued style attribute, which may allow injection attacks
author | Adam Chlipala <adam@chlipala.net> |
---|---|
date | Sun, 15 Apr 2012 12:40:53 -0400 |
parents | 8932f855fa85 |
children |
line wrap: on
line source
fun main () = s1 <- source False; s2 <- source False; return <xml><body> <dyn signal={s1 <- signal s1; return (if s1 then <xml><dyn signal={s2 <- signal s2; return <xml>{[s2]}</xml>}/></xml> else <xml>Not yet</xml>)}/> <hr/> <button value="s1" onclick={set s1 True}/> <button value="s2" onclick={set s2 True}/> </body></xml>