Looks like HTMX already has something like this, just client-side. https://htmx.org/attributes/hx-select/

That's probably safer in some ways than filtering server side.