2 ms·
Not everyone's as knowledged, hence information should be shared
by ramon156 2y ago
Not everyone's as knowledged, hence information should be shared
- qsort 2y agoI think the point is that htmx is in no way special. It's the same old category of vulnerability. It's why we have execvpe. It's why we have mysql_real_escape_string_no_really_we_mean_it_this_time(). I remember a similar point being made about LLM output. Now, I'm anything but a LLM fanboy, but if you pipe unknown text into a system interface that's squarely on you.
- yawaramin 2y agoAnd fortunately, it was https://htmx.org/essays/web-security-basics-with-htmx/ https://htmx.org/essays/web-security-basics-with-htmx/