Show HN: Zero – DX focused non framework to interact with the DOM

29 pointsposted 14 hours ago
by _nhh

4 Comments

dvh

7 hours ago

Isn't there xss in the first demo? What if title is user supplied and it's something like <script>alert("xss")</script>

_nhh

6 hours ago

User supplied stuff must always be sanitized :)

skeptrune

7 hours ago

API would be the proper term for this, no?

Maybe "typed API"?

_nhh

6 hours ago

What do you mean?