Hacker News Reader

doesn't the csp issue in htmx basically make it a non-starter for most applications? maybe that's been fixed somehow..

The hx-disable attribute can be used to disable htmx for parts of the DOM that load user generated content, is that what you're referring to? https://htmx.org/docs/#security

Reply on news.ycombinator.com