view tests/ahead.ur @ 2029:dfa35ca83d92

'sql_injectable_prim' instance for 'url'
author Adam Chlipala <adam@chlipala.net>
date Sun, 15 Jun 2014 10:48:53 -0400
parents 44f607a7f4cd
children
line wrap: on
line source
fun main () : transaction page = return <xml>
  <head>
    <script code={alert "Hi!"}/>
  </head>
  <body>
    <active code={alert "Bye!"; return <xml/>}/>
  </body>
</xml>