top | item 43658931

(no title)

j13n | 10 months ago

You can disable all use of eval with htmx. The tradeoff is one has to write a bit more JavaScript.

https://news.ycombinator.com/item?id=43650921

discuss

order

sudodevnull|10 months ago

I have thoughts about a fully compliant CSP middleware, problem is it's per language so I'd probably only make for Go (maybe PHP & TS)

geoka9|10 months ago

Hashes or nonces?