From 2cd1f8dc8e8602ba15d295a13ba77dd3294634a5 Mon Sep 17 00:00:00 2001
From: "Sean G. Wright" <sean@seangwright.me>
Date: Mon, 4 Dec 2023 19:32:12 -0500
Subject: [PATCH] Add global config security options to meta tag helper

---
 src/Htmx.TagHelpers/HtmxConfigMetaTagHelper.cs | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/src/Htmx.TagHelpers/HtmxConfigMetaTagHelper.cs b/src/Htmx.TagHelpers/HtmxConfigMetaTagHelper.cs
index 8b307df..f878039 100644
--- a/src/Htmx.TagHelpers/HtmxConfigMetaTagHelper.cs
+++ b/src/Htmx.TagHelpers/HtmxConfigMetaTagHelper.cs
@@ -90,6 +90,18 @@ public class HtmxConfigMetaTagHelper : TagHelper
     [HtmlAttributeName("addedClass")]
     public string? AddedClass { get; set; }
 
+    /// <summary>
+    /// defaults to false
+    /// </summary>
+    [HtmlAttributeName("selfRequestsOnly")]
+    public bool SelfRequestsOnly { get; set; }
+
+    /// <summary>
+    /// defaults to true
+    /// </summary>
+    [HtmlAttributeName("allowScriptTags")]
+    public bool AllowScriptTags { get; set; } = true;
+
     /// <summary>
     /// defaults to true
     /// </summary>
@@ -187,6 +199,8 @@ public override void Process(TagHelperContext context, TagHelperOutput output)
         var config = JsonSerializer.Serialize(new
         {
             AllowEval,
+            SelfRequestsOnly,
+            AllowScriptTags,
             DisableSelector,
             HistoryEnabled,
             IndicatorClass,