3 ms·
Htmx is the most dangerous thing to come out
- nullindividual 3y agoWhy? Are there supposed to be replies on the twitter thread?
- sp332 3y agoYes, but I don't think you can see them without being logged in. The argument is that it doesn't disable XSS by default. Here is the example video https://twitter.com/nsjames_/status/1682846144118902788 https://twitter.com/nsjames_/status/1682846144118902788 or hypothetical scenario in text form https://twitter.com/nsjames_/status/1682834706671235072 https://twitter.com/nsjames_/status/1682834706671235072 Responses are mostly negative even though the docs seem to agree. https://twitter.com/gurleen_s_/status/1682815674828111872 https://twitter.com/gurleen_s_/status/1682815674828111872 Commenters say that many frameworks do similar things and that defending against XSS is up to the developer.
- 8organicbits 3y agoDo any of the archive sites work with Twitter? This is pretty useless as-is.
- NoZebra120vClip 3y agotwitter.com errors out for me every time now. Perhaps due to my adblocker. Not gonna debug: nothing of value was lost.
- elchief 3y agoi create my html responses on the server using Jinja, which escapes everything by default this is a silly argument