Hey everyone,
I ve been playing around with RDX (Reactive Document eXpressions) recently and wanted to see what the community thinks about it.
For context: MDX is amazing, but because it allows arbitrary JavaScript execution, it s a massive security risk if you want to allow untrusted users to write content.
RDX takes a different approach: it uses the same familiar JSX-style syntax (<Notice type="warning">), but it parses into a strict, safe AST with zero code execution.
Two things really stood out to me about this approach:
Hi Product Hunt! 👋
We love Markdown, and we love components. But as soon as we tried to build platforms where users (not just developers) write content, MDX became a security liability.
We built RDX to solve the 'Security vs. Flexibility' trade-off. By treating documents as strictly typed data rather than executable code, we’ve made it possible to have your cake (rich UI components) and eat it too (zero XSS risk).
Whether you're building a next-gen CMS, a RAG-powered AI tool, or just want a documentation engine that isn't tethered to the Node.js ecosystem, RDX is for you.
Check out our reference implementation in Rust! We’d love your feedback on the spec.