# HG changeset patch # User Adam Chlipala # Date 1334508053 14400 # Node ID 540df112ff624e57a2aa5e6d8dc31d992c95f019 # Parent 4600cc5e335c8d49c65790133f5ab358987051e5 Remove string-valued style attribute, which may allow injection attacks diff -r 4600cc5e335c -r 540df112ff62 lib/ur/basis.urs --- a/lib/ur/basis.urs Wed Apr 11 03:03:19 2012 +0400 +++ b/lib/ur/basis.urs Sun Apr 15 12:40:53 2012 -0400 @@ -743,7 +743,7 @@ con boxEvents = focusEvents ++ mouseEvents ++ keyEvents ++ resizeEvents ++ scrollEvents con tableEvents = focusEvents ++ mouseEvents ++ keyEvents -con boxAttrs = [Id = id, Title = string, Style = string] ++ boxEvents +con boxAttrs = [Id = id, Title = string] ++ boxEvents con tableAttrs = [Id = id, Title = string] ++ tableEvents val span : bodyTag boxAttrs