Vdom: inject this string as HTML blob

zeroexcuses · July 20, 2023, 10:04am

Related to Ocaml/bonsai: simple JS repl : is there a way in virtual-dom to say: take this string, interpret it as a HTML fragment, inject it into the vdom tree ?

The XY problem is: in the repl output, instead of only allowing text output, I want to allow arbitrary HTML-fragment output. [don’t worry about security; this is situation where injection attacks just results in user messing up their own system]

Enoumy · July 20, 2023, 8:09pm

Yup! There is Virtual_dom.Node.inner_html ~tag:"div" ~attrs:[] ~this_html_is_sanitized_and_is_totally_safe_trust_me:{|... your fragment ...|} >.>

github.com

janestreet/virtual_dom/blob/master/src/node.mli#L143


      
          val lazy_ : ?key:string -> t Lazy.t -> t
          
          (** This function can be used to build a node with the tag and html content of
              that node provided as a string.  If this function was called with
              [~tag:"div" ~attrs:[] ~this_html...:"<b> hello world</b>"] then the resulting node would be
              [<div><b> hello world </b></div>]
          
              For totally sanitized content strings, this is fine; but if a user can influence
              the value of [content] and you don't have a sanitizer, they can inject code into
              the page, so use with extreme caution! *)
          val inner_html
            :  ?override_vdom_for_testing:t Lazy.t
            -> tag:string
            -> attrs:Attr.t list
            -> this_html_is_sanitized_and_is_totally_safe_trust_me:string
            -> unit
            -> t
          
          (** Same as [inner_html] but for svg elements *)
          val inner_html_svg
            :  ?override_vdom_for_testing:t Lazy.t

Topic		Replies	Views
Virtualdom / Svg / Blob for Icon Learning	10	768	June 18, 2023
Js_of_ocaml - unescaping text for dynamic html generation Learning	6	923	July 16, 2020
How do you handle imperative web api's in LexiFi's ocaml-vdom? Learning jsoo	3	1198	August 29, 2018
[ANN] Dream-html - DSL to build HTML, integrated with Dream Ecosystem dream	3	1357	July 4, 2023
Ocaml/bonsai: simple JS repl Learning	9	676	July 25, 2023

Vdom: inject this string as HTML blob

Related topics