Vdom: inject this string as HTML blob

zeroexcuses · July 20, 2023, 10:04am

Related to Ocaml/bonsai: simple JS repl : is there a way in virtual-dom to say: take this string, interpret it as a HTML fragment, inject it into the vdom tree ?

The XY problem is: in the repl output, instead of only allowing text output, I want to allow arbitrary HTML-fragment output. [don’t worry about security; this is situation where injection attacks just results in user messing up their own system]

Enoumy · July 20, 2023, 8:09pm

Yup! There is Virtual_dom.Node.inner_html ~tag:"div" ~attrs:[] ~this_html_is_sanitized_and_is_totally_safe_trust_me:{|... your fragment ...|} >.>

github.com

janestreet/virtual_dom/blob/master/src/node.mli#L143


      
          val lazy_ : ?key:string -> t Lazy.t -> t
          
          (** This function can be used to build a node with the tag and html content of
              that node provided as a string.  If this function was called with
              [~tag:"div" ~attrs:[] ~this_html...:"<b> hello world</b>"] then the resulting node would be
              [<div><b> hello world </b></div>]
          
              For totally sanitized content strings, this is fine; but if a user can influence
              the value of [content] and you don't have a sanitizer, they can inject code into
              the page, so use with extreme caution! *)
          val inner_html
            :  ?override_vdom_for_testing:t Lazy.t
            -> tag:string
            -> attrs:Attr.t list
            -> this_html_is_sanitized_and_is_totally_safe_trust_me:string
            -> unit
            -> t
          
          (** Same as [inner_html] but for svg elements *)
          val inner_html_svg
            :  ?override_vdom_for_testing:t Lazy.t

Topic		Replies	Views
Virtualdom / Svg / Blob for Icon Learning	10	720	June 18, 2023
Bonsai/virtual-dom diff an existing dom tree? Learning	2	362	June 15, 2023
Bonsai, enum, executing all paths Learning	7	355	July 7, 2023
[ANN] soupault: a static website generator based on HTML rewriting Community web	16	4799	October 27, 2021
[ANN] ✂️ form2xml - a tiny cli tool to slice http form-data dumps Community announce , cli , http , cgi	0	659	December 4, 2020

Vdom: inject this string as HTML blob

Related Topics