x-style
x-style copied to clipboard
Disable x-style in some parts of the DOM
Following this: https://htmx.org/docs/#security
This library looks really interesting! But I believe it could have some security issues with uploaded user html from a WYSIWYG, for example.
Good catch, I will add a similar 'x-style-disable' attribute.
Realistically, user submitted html needs to be going through an "allow list" (rather than block list) of elements and attributes. But not everyone is that thorough though.