view tests/headDyn.ur @ 2029:dfa35ca83d92

'sql_injectable_prim' instance for 'url'
author Adam Chlipala <adam@chlipala.net>
date Sun, 15 Jun 2014 10:48:53 -0400
parents 6817ddd6cf1f
children
line wrap: on
line source
fun main () : transaction page =
    x <- source <xml/>;
    return <xml>
      <head>
        <title>Test</title>
      </head>
      <body onload={set x <xml>boo</xml>}>
        <dyn signal={signal x}/>
      </body>
    </xml>

fun main2 () : transaction page =
    return <xml>
      <head>
        <title>Test</title>
      </head>
      <body>
        <button onclick={alert "Hi"}/>
      </body>
    </xml>