Datasette Apps: Sandboxed Hosting for AI-Generated HTML Apps Next to Your Data

simonwillison.net·medium signal

A new Datasette plugin hosts custom HTML applications directly inside Datasette, with CSP-based sandboxing aimed specifically at safely running AI-generated apps. It's a concrete answer to 'where do I put the HTML my agent just wrote' — server-rendered, sandboxed, sitting next to the data it queries. A useful pattern for shipping agent-authored micro-apps without standing up new infrastructure.