Launch of Datasette Apps Enhances Custom HTML Application Hosting

On June 19, 2026, Datasette announced the launch of Datasette Apps, a plugin that allows users to create and host custom HTML applications within their Datasette instances. These apps run in a secure sandbox, enabling them to execute read-only and write SQL queries against the Datasette database. The framework is designed to mitigate risks associated with running untrusted HTML and JavaScript, such as Cross Site Scripting (XSS) and data exfiltration. The sandboxed environment restricts access to external sites and limits the data that can be accessed, enhancing security for sensitive data. The announcement emphasizes the importance of security in enabling broader user engagement with custom app development. Users can try out the new feature by signing in to the demo instance. The launch is part of a broader trend towards integrating custom applications into data management platforms.

Key Points: • Datasette Apps allows custom HTML applications to be hosted securely within Datasette. • The plugin runs apps in a sandbox to prevent data exfiltration and mitigate XSS risks. • Users can execute both read-only and write SQL queries, enhancing data interaction capabilities.