Skip to main content

HTML artifacts

Draft, publish, and share interactive HTML experiences directly from Glean.

Overview

HTML artifacts are Glean‑native pages created from Canvas that are ideal for sharing interactive, stable content with a link in Glean.

Unlike non-HTML, export‑first artifacts (for example, docs, slides, emails, and Slack posts), HTML artifacts:

  • Live natively in Glean. Users can access HTML artifacts with a stable URL or optional go/link.
  • Are independent from the original chat, so you can safely share the finished experience without exposing the conversation that produced it.
  • Show up in search and the Artifacts library, just like other key knowledge surfaces in Glean.

Enable Canvas and Assistant for your organization to use HTML artifacts.

When to use HTML artifacts

Use an HTML artifact when:

  • The output is interactive, visual, or non‑document‑shaped (for example, exploratory views, dashboards, walkthroughs, light apps).
  • You want a single, stable link that people can bookmark, or turn into a go/link, and you don’t need Google Docs/Slides collaboration features.
  • You want to share the output, but not the chat. For example, a polished HTML explainer generated after a long Assistant session.

Use a non‑HTML, export‑first artifact when:

  • The canonical home should be an external editor: Docs, Slides, Email, Slack/Teams or similar.
  • You need rich, native collaboration (comments, tracked changes, presentation mode) in those tools.

Common use cases

HTML artifacts are a good fit for:

  • Interactive explainers and walkthroughs

    • Product tours, architectural diagrams, or “how this system works” pages where interaction helps tell the story.
  • Dashboards

    • HTML views that summarize recent activity, metrics, or findings for a customer or initiative, shared via a stable link.
  • Lightweight internal apps and tools

    • Simple calculators, forms, or interactive visualizations generated by Assistant and shared as a self‑contained experience for your team.
  • Research and analysis hubs

    • Rich DHTML visualizations for Deep Research outputs or internal analyses where a static document doesn’t capture the full experience.

Key capabilities

HTML artifacts support:

  • Glean‑native publishing

    • Sharing an HTML artifact publishes the current Canvas HTML view into a standalone artifact.
    • The artifact is coupled with further chat changes. You can continue iterating in Canvas, and viewers see the latest version.
  • Audience and role controls

    • Choose between private, team, or org‑wide visibility.
    • Assign view vs. edit access for collaborators.
  • Stable URLs and go/links

    • Glean assigns a stable URL for every HTML artifact, with an option to attach a human‑friendly go/link (for example, go/your_app).
  • Discovery across Glean

    • HTML artifacts are visible in search and the Artifacts library, alongside other important work outputs.
  • Context jump‑back (for editors)

    • Editors can jump from the published HTML artifact back to the originating Canvas/chat to see how it was created and continue iterating.

How to use HTML artifacts

Step 1: Create in Canvas

Start in Glean Canvas as you would for any artifact: ask Assistant to generate an HTML walkthrough, mini‑app, or visualization, or paste in existing HTML and refine it with Assistant.

Step 2: Preview HTML

Canvas renders HTML inside a secure, sandboxed frame so you can see the final interactive experience before publishing.

When you’re satisfied, select Share → General access → Anyone at <Organization> with the link can view to publish it.

  • Glean assigns a stable artifact URL and (optionally) a go/link.
  • You can share this link in email, Slack/Teams, or docs without exposing the underlying chat.

Permissions and sharing

HTML artifacts follow Glean’s existing permissions model:

  • Share within Glean only

    • Sharing an HTML artifact changes who can see that artifact in Glean (Search, direct link). It doesn't change permissions in any external systems.
  • Audience presets

    • Private to you
    • Visible to a specific team
    • Org‑wide, for broad‑reach artifacts like internal microsites or dashboards
  • Access controls

    • Viewers can open and interact with the HTML experience (within the sandbox).
    • Editors can update the underlying Canvas and republish updated versions as needed.

Where applicable, Glean may add light attribution (for example, a “Generated with Glean” footer or URL path) so new viewers understand that the artifact was produced in Glean and can discover Assistant for their own workflows.

Security and sandboxing

Because HTML artifacts can contain dynamic HTML, CSS, and JavaScript, Glean executes them inside a locked‑down sandbox designed to protect your data and session:

  • Sandboxed iframe execution

    • HTML runs inside an iframe with sandbox="allow-scripts", which isolates it from the parent app and gives it a null origin.
    • The code cannot access Glean cookies, localStorage, sessionStorage, or the parent DOM.
  • Strict content security policy (CSP)

    • A dedicated CSP for the HTML sandbox blocks outbound network requests (connect-src 'none'), disallows nested frames, and restricts form submissions.
    • Images and fonts are limited to safe sources to prevent data exfiltration via URLs.
  • No access to user data or credentials

    • Executed HTML cannot read Glean authentication tokens, user credentials, or private document content beyond what the artifact is explicitly rendering.

These controls are part of Glean’s broader security posture for Canvas and artifact execution; security teams can review the detailed architecture in the Artifact HTML Code Execution design and related security documentation.

Pricing and credit usage

Open Beta usage

Generating HTML artifacts don't consume FlexCredits during the open beta period.

HTML artifacts are a premium feature. Generating them consumes FlexCredits.

Known limitations

HTML artifacts are powerful but intentionally constrained to keep them safe and maintainable:

  • No server‑side code

    • HTML artifacts run only client‑side HTML/CSS/JS. They don't support Python, SQL, or server‑side execution.
  • No outbound network calls

    • The sandbox CSP blocks network requests (connect-src 'none'), so HTML artifacts cannot call external APIs or arbitrary endpoints.
  • No nested iframes or top‑level navigation

    • HTML artifacts cannot embed additional frames or navigate the parent page (for example, redirecting the Glean app).
  • No persistent storage for executed code

    • HTML artifacts don't provide persistent storage for client‑side state beyond what’s in the artifact itself; reruns start from a clean slate.

If you need deep, collaborative editing, advanced formatting, or long‑term versioning, consider exporting to Docs/Slides instead and using HTML artifacts for the interactive or exploratory parts of the workflow.

FAQs

See also