# Generated HTML sandbox policy

Generated HTML is active content and must run only on a separate credentialless origin.

- Validation rejects external URLs, forms, meta refresh, base elements, service workers, embedded credentials, MIME mismatch, and oversized data URIs.
- The iframe sandbox is exactly `allow-scripts`; `allow-same-origin`, forms, popups, downloads, and top navigation are absent.
- CSP denies network connections, forms, objects, workers, embedding, and ambient resource loading.
- Validation is a contract for the release candidate; it does not silently rewrite existing prototypes or the legacy publisher.