Sam Whited on Nostr: I did read that, but it's also part of what makes me nervous. It seems like they're ...

I did read that, but it's also part of what makes me nervous. It seems like they're trying really hard to say "it's better than react!" (or whatever, pick your poison) but not actually addressing the security model of htmx in any meaningful way. They kind of vaguely talk about how you may need to open up your CSP for some features, but don't really mention how necessary those features are, what attacks this enables or doesn't, etc. which doesn't leave me with a good feeling.