[whazor]

Besides whether it is a real security risk, this is useful information if you have to work with a security department. In particular, there are corporate environments where certain CSP settings would require approval or are simply not possible.

[stouset]

An article focused on "htmx requires more CSP exceptions than you might be comfortable with" would be great. This is not that article.