Artifact Preview

Code blocks marked html, svg, or mermaid include a Preview action.

HTML and SVG open in an iframe with script execution allowed inside the iframe sandbox. Mermaid blocks open as source text in v0.4.4; Sythoria does not render them as diagrams yet.

Network access#

HTML and SVG previews start with external network access disabled. The Network checkbox allows the preview to request HTTP, HTTPS, WebSocket, images, fonts, and other remote resources.

Leave it off unless the code needs a remote file and you trust the destination. Turning it on can reveal your IP address and ordinary request metadata to every host referenced by the artifact.

The iframe cannot use Sythoria's native file tools. Enabling Network does not grant access to a project folder.

Current controls#

The v0.4.4 preview provides:

• a preview action on HTML, SVG, and Mermaid code blocks;
• an HTML/SVG iframe;
• a Network checkbox for HTML and SVG; and
• a close button.

There is no Visual/Source tab switcher, responsive device selector, Markdown artifact type, or dedicated preview shortcut in this release. Ctrl+Shift+P opens the command palette.

Treat previews as code#

Read generated HTML and scripts before opening them. The iframe is a useful boundary, but it does not make unknown code trustworthy. Close the preview and keep Network off if the artifact asks for credentials, local paths, or access to an unrelated service.