Hacker News new | ask | show | jobs
by cluckindan 338 days ago
Because using htmx is asking to get defaced via XSS, or worse. Security is an afterthought for the project, which is evident from the placement of the related documentation.
2 comments

security rules for htmx are no different than any other hypermedia approach: you need to escape all user content

https://htmx.org/essays/web-security-basics-with-htmx/

How is this better?
It probably isn’t.