• rwhitisissle@lemmy.world
    link
    fedilink
    arrow-up
    1
    ·
    9 months ago

    CSP works on the browser API level - all HTMX does is what you could do yourself with any AJAX: send an HTTP request to an endpoint. If the CSP disallows that endpoint, it will fail.