Datasette Apps: Host custom HTML applications inside Datasette
simonwillison.net
June 19, 2026
8 min read
🔥🔥🔥🔥🔥
55/100
Summary
Datasette Apps are self-contained HTML and JavaScript applications that operate within a constrained iframe sandbox on Datasette. This plugin allows users to host custom applications directly within their Datasette environment.
Key Takeaways
- Datasette Apps are self-contained HTML+JavaScript applications that run in a sandboxed <iframe> within Datasette, allowing for read-only and configurable write SQL queries against Datasette data.
- The sandboxing mechanism prevents access to cookies, localStorage, and external HTTP requests, enhancing security for applications running on sensitive data.
- Datasette Apps combine a flexible backend with a self-contained HTML frontend, providing a powerful framework for building custom applications that can leverage persistent relational databases.
- The implementation utilizes a Content Security Policy (CSP) to lock down access to external domains, ensuring that the sandboxed applications cannot exfiltrate private data.
Coverage & discussions
Hacker News · simonwillison.net
Community discussions
Hacker News discussion ↗
Historical count: 5 · 5 saved in sample · Historical sample
Analysis ready
Community Sentiment
Positives
- The integration of custom HTML applications with Datasette simplifies the development process, allowing for a more cohesive deployment of data and applications in one place.
- Utilizing SQLite's robustness in a web environment could enhance the reliability of applications, making them more accessible and user-friendly.
- Browser advancements have significantly improved how we handle HTML and data, reducing the complexity of coding and increasing security through built-in features.
Concerns
- Concerns about potential bugs in the implementation highlight the risks associated with new frameworks, indicating that even small errors could lead to significant issues.
- The comment about AI code quality raises doubts about the separation of concerns in AI-driven projects, suggesting a lack of clarity in managing AI and human roles.
