DEV Community

Cover image for 🎙️We've implemented new features in HMPL to help developers make web apps smaller and more secure🔥

🎙️We've implemented new features in HMPL to help developers make web apps smaller and more secure🔥

Anthony Max on March 13, 2025

Today, I am pleased to introduce new functionality that will make the template language more secure than it has ever been. Several useful features ...
Collapse
 
Sloan, the sloth mascot
Comment deleted
Collapse
 
anthonymax profile image
Anthony Max HMPL.js

A cross-site scripting (XSS) attack is one in which an attacker is able to get a target site to execute malicious code as though it was part of the website.

Collapse
 
Sloan, the sloth mascot
Comment deleted
Collapse
 
anthonymax profile image
Anthony Max HMPL.js

Thanks!

Collapse
 
anthonymax profile image
Anthony Max HMPL.js

XSS vulnerabilities are one of the biggest problems for websites today. I think the new features fit perfectly into the concept of the module

Collapse
 
harry_brook profile image
Harry Brook

Thanks for this useful info!

Collapse
 
marvin_p profile image
Marvin Poole

Looks interesting, but we need to see it in practice. DOMPurify itself is popular, but it may not be needed here

Collapse
 
anthonymax profile image
Anthony Max HMPL.js

No, DOMPurify is needed here.