News for hackers. Stuff that matters.
Re:How I use HTMX with Go by Abishek_Muthian on Wednesday July 15, 2026 @12:56PM (#48923778)
AFAIK Hyperscript doesn't require `unsafe-eval`, when the optional features of htmx like `hx-on:*`, `hx-vals js:`, `hx-confirm js:` is used it required the `unsafe-eval` but now there's extension[1] to use even that without compromising on strict CSP through nonce.

[1] https://four.htmx.org/extensions/hx-csp

Re:How I use HTMX with Go by foldr on Wednesday July 15, 2026 @02:50PM (#48925387)
That’s interesting, thanks. I agree that with all those extra protections enabled, there is no security issue.