view tests/view.ur @ 1241:58f5ac1bb849

Check for implicit flows via expressions injected into SQL
author Adam Chlipala <adamc@hcoop.net>
date Thu, 15 Apr 2010 14:21:12 -0400
parents 8688e01ae469
children
line wrap: on
line source
table t : { A : int, B : string }

view v = SELECT t.A AS X FROM t

fun main () =
    rows <- queryX (SELECT * FROM v)
            (fn r => <xml><li>{[r.V.X]}</li></xml>);
    return <xml><body>
      {rows}
    </body></xml>