NASA’s new dark energy space telescope can also detect killer asteroids
technologyreview.com·2h ago
Data Science
Simon Willison's Blog·Jun 18·5 min read
Datasette Apps: Host custom HTML applications inside Datasette
TL;DR
Datasette lacked a way to host custom applications that could interact with its data securely. The new plugin, datasette-apps, allows developers to create self-contained HTML and JavaScript applications that run in a secure iframe environment.
✦ Why It Matters
Engineers can now build secure, custom applications within Datasette to enhance data interaction and visualization.
Key Takeaways
- Explore the Datasette Apps plugin for custom app development.
- Utilize stored queries for safe write operations in your applications.
- Leverage AI tools to generate app code quickly.
- Experiment with the secure sandboxing features to protect sensitive data.
How It Works
Datasette Apps operates within a secure <iframe> sandbox that restricts access to sensitive data and external resources. It uses a Content Security Policy (CSP) to prevent unauthorized data access while allowing the execution of read-only SQL queries through a controlled messaging protocol.
Developers can create applications that interact with the database safely, using stored queries for write operations.