←back to thread

218 points mdhb | 1 comments | | HN request time: 0.219s | source
1. jongjong ◴[] No.44392408[source]
Yes, it's weird that Browsers were so fast to ship CSP rules to prevent XSS attacks by limiting the use of inline scripts but so slow to ship a templating mechanism which would largely solve the problem.

It's like creating regulations which require a specific solution before that solution exists.