Guides

Narrow the list: pick a technology, then a version, then the error you see. Pick any to skip a step. Or type after the cursor, paste an error, or try help.

Nothing here matches. cd / goes back to every guide.

Type to narrow the choices and the guides, or paste an error. Tab completes, ↑ ↓ choose, Enter opens, Backspace on an empty line goes back a step, Esc clears. Commands: cd .., cd /, cd <name>, clear and help.

Error or symptom

• a form submits fine but does not clear or reset afterwards
• Evaluating a string as JavaScript violates the following Content Security Policy directive because 'unsafe-eval' is not an allowed source of script: script-src 'self'
• any

1 of 6

1. htmx hx-on fails: unsafe-eval is not an allowed source of script

   Under a Content-Security-Policy with script-src 'self', htmx compiles hx-on attributes into a function at runtime and the browser refuses to run it. Moving the same code into a script file as an event listener fixes it.

   ▮▮▯ one layer down / checked 28 Sep 2026 / htmx 2.0.7 · Content Security Policy / htmx · csp · javascript · security