htmlark security

Agent HTML is untrusted. The local server is not you owning the machine.

Loopback

Serve binds 127.0.0.1. The Host header must match the configured host and port. Mutations require application/json and a random X-Htmlark-Token from process start. Cross-origin mutations are rejected. There is no CORS.

Sandbox

/render is a CSP document: no network, no parent breakout except a small postMessage bridge. The viewer chrome on /a is not the artifact. Dirty versions return 409 on /render and are not executed.

Vendor

Scripts are pinned at write time to /vendor/pkg@version/file. Fetch is HTTPS only, with SSRF checks. GET /vendor does not go upstream. Uncached or unreferenced specs are 404.

Share

Do not send a loopback URL to someone else. Export a file. A public origin is a later Worker, not this homepage.