Free tools
HTML share check
Paste HTML or drop an .html file to see what can break or leak when you send it to someone. The check lists missing files, local addresses, likely API keys and other problems.
- Runs in your browser
- No account
- Get a link when you want one
Paste content or choose a file to see the preview.
Get a link
Publish this page to a Display URL that you can send to anyone.
- Anyone with the link can open it for 30 days. Search engines do not index it.
- You also get a claim link. Open it and sign in to keep the page and choose who can open it.
Nothing leaves your browser until you select Get a link. Do not publish passwords, keys or personal data.
How to use the HTML share check
- Paste HTML into the source box, or drop an .html file on it. To see how the tool works, select Load an example.
- Read the report. Fix items show what breaks for other people. Check items show what can break, depending on where you publish the page.
- Fix the file and paste or drop it again. The report changes while you type.
- Select Preview to see the page. To send it to someone, select Get a link.
Limits
- The check reads the source only. It does not run scripts or load files, so it cannot find problems that a script causes when it runs.
- The key and token check finds common formats only. When it finds nothing, the file can still contain a secret.
- The check cannot see your computer, so it cannot tell if a relative path points to a file that exists. It reports every relative path.
- The preview runs scripts in a sandbox. Scripts cannot read your display.dev session, cookies or storage.
- The tool checks and publishes up to 5 MB of HTML. For files up to 50 MB, publish with the Display CLI.
- Get a link makes a public link. Anyone with the URL can open it for 30 days. Search engines do not index it.
HTML share check questions
Does the check send my file to Display?
No. The check runs in your browser. Display receives the HTML only when you select Get a link.
Why does a relative path break when I share the file?
A path such as images/chart.png points to a file next to the HTML file on your computer. The person who opens your link does not have that file. Put the image in the page as a data URL, or use a full https:// URL.
Is my file safe to share when the report finds no keys?
Not always. The check finds common key and token formats only. Read the source before you share it, and rotate any key that was in a file that you sent.
Why does Display block requests to other domains?
A published page can send requests only to its own domain. An organization Owner can add other domains to the domain allowlist. This stops a shared page from sending data to a domain that the organization did not approve.
Let your agent publish the next one
Connect Cursor, Codex, Claude Code or any other agent. It publishes HTML and Markdown to a URL, and you choose who can open it.
Claude
Cursor
Codex