Live data from Hacker News

Datastar: Web Framework for the Future?

chrismalek.me

11–20 of 161 posts

Re: Datastar: Web Framework for the Future?

#16
post #6

This is the second post I’ve seen praising Datastar in the last 24 hours, and once again no mention of the requirement to punch a gaping hole in one’s Content-Security-Policy. If this is the framework of the future, cyber criminals are going to have a bright future!

That's the nature of anything that does this kind of work. React, Svelte, Solid. Alpine has a CSP version but it does so little that I recommend you just accept being a Web1 MPA basic site.

I have ideas around ways around this but it's a per language template middleware.

Re: Datastar: Web Framework for the Future?

#17
post #9
post #6

This is the second post I’ve seen praising Datastar in the last 24 hours, and once again no mention of the requirement to punch a gaping hole in one’s Content-Security-Policy. If this is the framework of the future, cyber criminals are going to have a bright future!

How does this compare to HTMX (security wise)?

Same, you control your signals and fragments. So you are responsible for proper escaping and thoughtful design.

Re: Datastar: Web Framework for the Future?

#20
post #4

> "what is a signal?" it's another word for event

a signal is not a single event but rather a stream of events at given timestamps (or, if you wish, a stream where you have an Option at each timestamp)

I googled this and got a few different answers, but not this one. Is there a particular implementation you’re referring to?
Post reply on HN