Mercurial > urweb
view tests/headers.ur @ 2116:ebfaab689570
The 2nd half of proper CSRF protection related to environment variables
author | Adam Chlipala <adam@chlipala.net> |
---|---|
date | Thu, 12 Feb 2015 15:09:26 -0500 |
parents | 2f5fd248588d |
children |
line wrap: on
line source
fun action () = setHeader (blessResponseHeader "Location") "http://www.google.com/"; return <xml/> fun main () = ag <- getHeader (blessRequestHeader "User-Agent"); return <xml><body> User agent: {[ag]} <form> <submit action={action}/> </form> </body></xml>