Live HTML, CSS & JS Sandbox & Artifact Viewer
Paste any single-file HTML5 prototype, Tailwind mockup, AI-generated UI artifact, or interactive chart to preview it inside an isolated opaque-origin sandbox, then publish an instant `/v/:id` Pure Artifact link with zero signup.
cat prototype.html | curl --data-binary @- https://supanote.app/paste
Publish any local HTML prototype or AI-generated artifact from your terminal in one command.
Capabilities & Guarantees
- ✓ Opaque null-origin iframe sandbox (`sandbox="allow-scripts"`) prevents cookie or storage access
- ✓ Instant Claude Artifact-style full-viewport sharing via `/v/:id`
- ✓ Supports single-file HTML5, inline CSS, Canvas/WebGL, and vanilla JS
- ✓ Switch seamlessly between live rendered output and syntax-highlighted source
Common Engineering Workflows
Sharing Claude, ChatGPT & Cursor Single-File Artifacts
Paste AI-generated interactive calculators, dashboards, or mini-apps and send a clean `/v/:id` link to teammates or clients.
Minimal Bug Reproductions & CSS Layout Demos
Create lightweight HTML/CSS repro cases without waiting for heavy cloud IDE containers to boot.
Safe Untrusted Markup Inspection
Render HTML snippets inside a strict sandboxed frame with `referrerpolicy="no-referrer"` and isolated origin execution.
Technical Questions & Details
How does Supanote isolate untrusted HTML and JavaScript?
HTML previews execute inside an `<iframe sandbox="allow-scripts" referrerpolicy="no-referrer">` without `allow-same-origin`, giving the snippet an opaque null origin with zero access to parent cookies or localStorage.
What is the difference between `/n/:id` and `/v/:id` for HTML notes?
`/n/:id` displays the standard Supanote page with source code, metadata, and actions, while `/v/:id` renders the HTML in Pure Artifact View across 100% of the viewport with only a minimal floating pill.
Do I need an account to publish a live HTML sandbox link?
No. Click "Share Clean Link" or "Open Pure Artifact" to publish immediately with zero registration.
Explore Related Tools, Templates & Comparisons
Parse Nginx combined access logs and upstream error traces instantly with HTTP status colorizing and secret scanning.
Inspect Docker Compose stdout/stderr streams, JSON log drivers, ANSI color codes, and multi-line stack traces.
Turn raw comma, tab, or semicolon-delimited text into a fast, sortable spreadsheet table in one paste.
Paste raw `<svg>` code to inspect crisp vector rendering, viewBox dimensions, and byte size immediately.