Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Does this play nice with a Content Security Policy which forbids inline-scripts / styles?


If you have a CSP that forbids inline scripts htmx will still work. If you disable eval a few features will not (e.g. trigger filter expressions).

You can set htmx.config.allowEval to false for compatibility with your CSP.


Cool, thanks. Looks quite interesting.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: