News for hackers. Stuff that matters.
Re:HTML event handler attributes: down the rabbit hole by vgel on Thursday April 28, 2022 @03:58AM (#31189871)
1. The page described is a license management page without user-generated content, so what purpose would a CSP serve besides preventing valid end-user fiddling?

2. YAGNI, in my experience.

3. That's a lot more code than onsubmit="handler(event)", and you've lost the ability to see what the form is doing by reading the HTML.

5. type=submit is semantic and helps the browser provide default behavior like submitting the form when you press enter.

There are no comments on this comment yet.