datasette-apps 0.1a2
datasette-apps 0.1a2 was released, adding a new apps-set-csp permission for custom network/CSP origins with an optional plugin allow-list. It also includes keyboard navigation for the stored query picker, prevents #fragment links from triggering the confirmation modal, and fixes the link confirmation modal and logging panels in full-screen mode.
Background
- Datasette is an open-source tool (created by Simon Willison) that turns any SQLite database into a browsable, queryable web interface. It's popular among data journalists, researchers, and developers who publish or explore tabular data.
- "Datasette Apps" is a newer sub-project that lets users embed interactive mini-applications (e.g., custom query UIs, dashboards) inside a Datasette instance, with their own security and permission controls.
- This 0.1a2 release is an early alpha, so features are still being hardened — notably around Content Security Policy (CSP) restrictions, which prevent malicious scripts from running, and granular permissions for who can set those policies.
- The "external-link confirmation modal" is a Datasette Apps feature that warns users when they click a link leaving the app; this release fixes bugs where fragment links (e.g., #section) inside the same page were wrongly triggering that warning.