Hacker News new | ask | show | jobs
by tylercrompton 1041 days ago
Something about injecting HTML from an API, even from a controlled server, feels wrong.
1 comments

But that’s the point: its not an API, it’s just an app web server.

There’s nothing wrong with a web server serving HTML; that’s their whole purpose.