Console’s review
· Reviewed by David Mytton
What we like
Build web app functionality by using augmented HTML attributes rather than complex JS frameworks. Supports HTTP requests, WebSockets, server sent events, CSS transitions, etc all in HTML. No dependencies. Has built in form validation. Events system linked to logging for debugging. Open source.
Tradeoffs
Logic is defined directly in the DOM which poses a security risk - you need to properly think through escaping and whether to use certain attributes. Setting a CSP is particularly important.