Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
Sichere ProgrammierungWe Built a CLI to Find Out If You’re Overpaying for Claude(24.09.2026 um 04:35 Uhr)
Sichere ProgrammierungMy own sandbox was killing my agent's shell, and the exit code hid it(24.09.2026 um 04:38 Uhr)
Sichere ProgrammierungHow three OSLabs engineers built a CLI to catch you overpaying Claude(24.09.2026 um 04:45 Uhr)
Sichere ProgrammierungBreaking CI Guards on Purpose to Prove They Can Fail(24.09.2026 um 05:00 Uhr)
IT Security NachrichtenLangfristige Updatefähigkeit als Pflicht(24.09.2026 um 05:03 Uhr)
Sichere ProgrammierungWe Built a CLI to Find Out If You’re Overpaying for Claude(24.09.2026 um 04:35 Uhr)
Sichere ProgrammierungMy own sandbox was killing my agent's shell, and the exit code hid it(24.09.2026 um 04:38 Uhr)
Sichere ProgrammierungHow three OSLabs engineers built a CLI to catch you overpaying Claude(24.09.2026 um 04:45 Uhr)
Sichere ProgrammierungBreaking CI Guards on Purpose to Prove They Can Fail(24.09.2026 um 05:00 Uhr)
IT Security NachrichtenLangfristige Updatefähigkeit als Pflicht(24.09.2026 um 05:03 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

AI can generate HTML. Publishing it is still weirdly annoying.

AI tools are now pretty good at making complete HTML artifacts: a small portfolio page a product one-pager a pitch deck in HTML a resume a visual prototype a client preview But after the model gives you the HTML, there is still an…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

AI tools are now pretty good at making complete HTML artifacts:




  • a small portfolio page

  • a product one-pager

  • a pitch deck in HTML

  • a resume

  • a visual prototype

  • a client preview





But after the model gives you the HTML, there is still an awkward last step:




How do I turn this into a real URL I can send to someone?




For developers, the normal answer is GitHub Pages, Netlify, Vercel, Cloudflare Pages, or an object-store flow. Those are good tools. But they are also a lot of ceremony when the artifact is just one finished HTML file.



For non-developers, the gap is even worse. They can ask ChatGPT to create a nice HTML page, but the result often stays trapped in a chat window or a local file.






The narrow problem



The use case I wanted to solve was not "deploy a website."



It was:




Publish one complete AI-generated HTML document as a shareable link.




That means:




  • no repo required

  • no build step

  • no ZIP project

  • no framework deployment

  • no DNS setup

  • optional access-key sharing for private previews





So I built FolioDrop around that narrow contract.






What FolioDrop does



FolioDrop accepts one complete single-file HTML document and returns a real URL.



It is intentionally smaller than a static host:




  • Paste or upload one HTML work manually.

  • Publish from an AI tool through MCP or OpenAPI.

  • Save public works into a lightweight personal folio.

  • Keep access-key protected works unlisted.

  • Keep individual shared work routes out of search indexing.





The important boundary: FolioDrop is not a replacement for Vercel, Netlify, GitHub Pages, or Cloudflare Pages. If your project needs multiple files, a framework, a custom domain, or long-term production hosting, those tools are a better fit.



The comparison is here: FolioDrop vs static hosting.






Why MCP/OpenAPI matters here



The manual flow is useful, but the more interesting flow is agent-native publishing.



If an AI host can call a publish tool, the user can ask for:




Make this into a single-file HTML page and publish it.




The agent can then:




  1. generate the HTML

  2. validate that it is a complete document

  3. call the publishing endpoint

  4. return a URL





FolioDrop exposes:




  • MCP endpoint: https://foliodrop.app/mcp

  • public MCP config: https://foliodrop.app/api/ai/mcp-config.json

  • OpenAPI description: https://foliodrop.app/api/ai/openapi.json



I also packaged the publishing workflow as an open GitHub skill:



github.com/jaxxchen003/foliodrop-publisher-skill



That repo includes a single-file HTML validator and templates for decks, resumes, product one-pagers, emails, and portfolio case studies.








The publishing contract



The current contract is deliberately strict:




  • include <!doctype html>

  • include <html>, <head>, and <body>

  • inline CSS in <style>

  • inline JavaScript only when needed

  • use public HTTPS URLs for external images or fonts

  • do not include tokens, secrets, passwords, or local file paths



This constraint keeps the product predictable. It also makes the output easier for AI agents to reason about.








What I learned



The hard part was not generating HTML. The hard part was making the last mile boring:




  • return a stable URL

  • avoid leaking access keys

  • avoid indexing private previews

  • make deletion and expiry clear

  • keep the product boundary honest

  • give agents a structured way to publish without putting secrets into prompts



I wrote up two answer pages for the common questions:





The product is small on purpose. If the work is a real website, use a real static host. If the work is one complete AI-made HTML artifact and you just need a link, that is the gap FolioDrop is trying to close.

SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - AI can generate HTML. Publishing it is still weirdly annoying.
id: a251d681-ed03-4093-aeee-91d5c94098bf
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "AI can generate HTML. Publishi" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich AI can generate HTML. Publishing it is s.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten AI can generate HTML. Publishing it is still weirdly annoying.

Thematisch verwandte Begriffe: generate, HTML, Publishing, still · 6 Treffer

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-96676 | A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impa…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick