• rwhitisissle@lemmy.ml
      link
      fedilink
      arrow-up
      4
      ·
      2 months ago

      I do a lot of systems and backend programming and HTMX is the only way I can actually be productive with frontend work when I have to do it. It’s so simple and straightforward.

      • rwhitisissle@lemmy.ml
        link
        fedilink
        arrow-up
        2
        ·
        2 months ago

        I’ve heard nothing but good things about HTMX

        I’ve only ever heard anything “bad” about HTMX and it was here on Lemmy, actually. I ran into someone who was absolutely certain that HTMX was unsafe by design because it leveraged HTML over the wire and was therefore susceptible to HTML injection attacks, specifically by injecting malicious scripts that could be ran from domains you didn’t control. I tried explaining that proper utilization of access-control headers innately prevented this because they worked on the browser level and couldn’t be intercepted or interfered with by HTML injection by design, but he kept insisting it was unsafe while refusing to elaborate. He was very wrong, of course, but also very confident.