Mercurial > urweb

changeset 1710:540df112ff62

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Remove string-valued style attribute, which may allow injection attacks
author Adam Chlipala <adam@chlipala.net>
date Sun, 15 Apr 2012 12:40:53 -0400
parents 4600cc5e335c
children 78ea155b6b14
files lib/ur/basis.urs
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/lib/ur/basis.urs	Wed Apr 11 03:03:19 2012 +0400
+++ b/lib/ur/basis.urs	Sun Apr 15 12:40:53 2012 -0400
@@ -743,7 +743,7 @@
 con boxEvents = focusEvents ++ mouseEvents ++ keyEvents ++ resizeEvents ++ scrollEvents
 con tableEvents = focusEvents ++ mouseEvents ++ keyEvents
 
-con boxAttrs = [Id = id, Title = string, Style = string] ++ boxEvents
+con boxAttrs = [Id = id, Title = string] ++ boxEvents
 con tableAttrs = [Id = id, Title = string] ++ tableEvents
 
 val span : bodyTag boxAttrs