rwhitisissle

joined 1 year ago
[–] rwhitisissle 2 points 10 months ago* (last edited 10 months ago) (5 children)

HTMX enables arbitrary invocation of ANY api endpoint with cookies included, through html attributes, which inherently can’t be covered by Content Security Policy

I want you to please explain how HTMX bypasses the Content Security Policy connect-src directive, or any -src directive, for that matter, assuming it is specified (which it should be). Because I'm genuinely curious why the HTMX dev team would include a section on CSP in their docs if it did literally nothing, as you say.

Actually, as an even more basic question...you do know that HTMX is literally just an AJAX library, right? It doesn't actually "do" anything via HTML attributes. The additional HTMX attributes, like hx-get, hx-post, etc. just tells HTMX where and how to make the API requests. These requests are executed by the browser's native fetch or XMLHttpRequest APIs, depending on compatibility and implementation. Therefore, HTMX is subject to the same security constraints and policies as any other JavaScript-based operation that makes HTTP requests. Which also, by definition, means that it adheres to the Content Security Policy directives configured for that website.

In other words, an HTML button element with hx-get="https://www.some-endpoint.com/" on it would eventually translate into

const xhr = new XMLHttpRequest();
xhr.open("GET", "https://www.some-endpoint.com/");
xhr.send();

on click.

You do understand that, right?

[–] rwhitisissle 16 points 10 months ago (1 children)

This might be true, but Rowling also makes choices in regards to how she thinks we should perceive individuals who do want to change the world for the better. Hermione wants to free the house elves and is depicted as being a busybody and white knight more interested in her own sense of self-righteousness than actually improving the world. In art, just as in real life, the particular contains the universal, and we can make the logical conclusion that this is how Rowling broadly perceives people in the real world that advocate for social change.

[–] rwhitisissle 9 points 10 months ago

Black goes with everything and hides stains better than lighter colors.

[–] rwhitisissle 3 points 10 months ago

Don't forget the programmers! (teledildonics)

[–] rwhitisissle 12 points 10 months ago* (last edited 10 months ago) (1 children)

"Billionaire has shitty beliefs. In other news, the weather in London is still complete ass."

[–] rwhitisissle 5 points 10 months ago

The preferred term is NaMP - Not a Magical Person/Non-Magical Person. You could also say "Person of Non-Magic," but it's hard to pronounce "ponm."

[–] rwhitisissle 9 points 10 months ago (9 children)

number puzzles that need to be solved.

In JK Rowling's mind the number puzzles are things like "How many genders are there?"

The correct answer, of course, is "Fuck you, JK Rowling, that's how many."

[–] rwhitisissle 29 points 10 months ago (4 children)

Remember when shootings were so rare that a shooting happening one time at one place was enough to spawn a lasting phrase in American English? Simply fascinating how the times have changed.

[–] rwhitisissle 51 points 10 months ago (15 children)

I'm actually a huge fan of scalping and hope it happens more. Here's why: many of your more dim-witted, more or less middle-class "free market" bros will gladly tell you that the value of a good is set by supply and demand. Hospital care is so expensive because there are comparatively few doctors, MRI machines, etc. in comparison with the entire population. Houses are so expensive because everyone wants a house and it's an appreciable asset. I've seen these people my entire life. They'll decry socialism and make the age old joke that "socialism is when no potato." But the second a PS5 gets a street price of 700 bucks, suddenly they become walking "Homer Simpson fading into the hedge and coming back out wearing a different outfit" memes. They'll say things like "scalping should be illegal" or "the government should step in to make sure that the actual consumers who want one can get one - nobody should be allowed to buy 500 of them and just sit on them forever." Suddenly, market economics produces a state of inequality that doesn't directly benefit them, and the guiding hand of the government should be used to ensure equitable distribution of resources. Not that they'd ever reflect on this in any way or consider how their personal experiences indicates a larger set of structural problems with the economic systems that produce such a state of affairs.

[–] rwhitisissle 5 points 10 months ago

I'm assuming that's just revenue from The Onion, although the wording on it leaves much to be desired.

[–] rwhitisissle 2 points 10 months ago

if every human was nutritionally educated and conscious, this planet would be a fuckin Utopia

Well, I'm not going to say that's the dumbest thing I've ever heard, but it's certainly got a shot at the title.

view more: ‹ prev next ›