AI is changing the world. Don't stay behind. Clear summaries, community insight, delivered without the noise. Subscribe to never miss a beat.

Privacy

Contact

Back to all news

datasette developer-tools web-applications javascript

Datasette Apps: Host custom HTML applications inside Datasette

simonwillison.net

June 19, 2026

8 min read

🔥🔥🔥🔥🔥

49/100

Summary

Datasette Apps are self-contained HTML and JavaScript applications that operate within a constrained iframe sandbox on Datasette. This plugin allows users to host custom applications directly within their Datasette environment.

Key Takeaways

Datasette Apps are self-contained HTML+JavaScript applications that run in a sandboxed <iframe> within Datasette, allowing for read-only and configurable write SQL queries against Datasette data.
The sandboxing mechanism prevents access to cookies, localStorage, and external HTTP requests, enhancing security for applications running on sensitive data.
Datasette Apps combine a flexible backend with a self-contained HTML frontend, providing a powerful framework for building custom applications that can leverage persistent relational databases.
The implementation utilizes a Content Security Policy (CSP) to lock down access to external domains, ensuring that the sandboxed applications cannot exfiltrate private data.

Read original article

Community Sentiment

Mixed

Positives

The integration of custom HTML applications with Datasette simplifies the development process, allowing for a more cohesive deployment of data and applications in one place.
Utilizing SQLite's robustness in a web environment could enhance the reliability of applications, making them more accessible and user-friendly.
Browser advancements have significantly improved how we handle HTML and data, reducing the complexity of coding and increasing security through built-in features.

Concerns

Concerns about potential bugs in the implementation highlight the risks associated with new frameworks, indicating that even small errors could lead to significant issues.
The comment about AI code quality raises doubts about the separation of concerns in AI-driven projects, suggesting a lack of clarity in managing AI and human roles.