[pessimizer]

I think the point being made that you're replying to is that it has nothing to do with htmx. It isn't htmx that's not playing well with content security policy.

[yencabulator]

Using htmx effectively prevents using CSP for security hardening.