Building an isolated preview for AI-generated HTML
Source: readIt November 2, 2026
A srcdoc iframe runs model-written HTML on your own origin, so a security engineer breaks the naive approach and rebuilds it with sandbox and a strict CSP
security ai html