Embed tester HTML via srcdoc iframe to sandbox JS scope

app.py

@@ -11,6 +11,7 @@ from pathlib import Path
 from typing import List, Tuple
 
 import gradio as gr
+import html as py_html
 
 BASE_DIR = Path(__file__).parent
 HTML_PATH = BASE_DIR / "api-tester.html"
@@ -41,8 +42,14 @@ def build_auth() -> List[Tuple[str, str]] | None:
 
 
 def build_demo(html: str, auth: List[Tuple[str, str]] | None) -> gr.Blocks:
+    escaped = py_html.escape(html, quote=True)
+    iframe = (
+        "<iframe id='tester-frame' title='LibraxisAI Responses API Tester' "
+        "style=\"width:100%;height:90vh;border:none;background:#0b0b0c;\" "
+        f"srcdoc=\"{escaped}\"></iframe>"
+    )
     with gr.Blocks(title="LibraxisAI API Batch Tester", css="body{background:#0b0b0c;}") as demo:
-        gr.HTML(html)
+        gr.HTML(iframe)
     port = int(os.getenv("PORT", os.getenv("GRADIO_PORT", "7860")))
     demo.launch(
         server_name="0.0.0.0",