Hacker News new | ask | show | jobs
by DrStartup 328 days ago
XUL! why not just use htmx and the platform?
1 comments

Because using htmx is asking to get defaced via XSS, or worse. Security is an afterthought for the project, which is evident from the placement of the related documentation.
security rules for htmx are no different than any other hypermedia approach: you need to escape all user content

https://htmx.org/essays/web-security-basics-with-htmx/

How is this better?
It probably isn’t.