Mercurial > urweb
view demo/url.ur @ 2116:ebfaab689570
The 2nd half of proper CSRF protection related to environment variables
author | Adam Chlipala <adam@chlipala.net> |
---|---|
date | Thu, 12 Feb 2015 15:09:26 -0500 |
parents | 412ccd97ab71 |
children |
line wrap: on
line source
fun yourChoice r = return <xml><body> {case checkUrl r.Url of None => <xml>You aren't allowed to link to there.</xml> | Some url => <xml><a href={url}>Enjoy!</a></xml>} </body></xml> fun main () = return <xml><body> <a href="http://en.wikipedia.org/wiki/Type_inference">Learn something</a><br/> <br/> <form> URL of your choice: <textbox{#Url}/> <submit action={yourChoice}/> </form> </body></xml>