---
title: "Check an HTML File Before You Share It – Display"
description: "Find what breaks or leaks when you send an HTML file – missing files, local URLs and likely API keys. Free, runs in your browser."
---

# HTML share check

Paste HTML or drop an .html file to see what can break or leak when you send it to someone. The check lists missing files, local addresses, likely API keys and other problems.

Open the tool: https://display.dev/tools/html-share-check

## How to use the HTML share check

1. Paste HTML into the source box, or drop an .html file on it. To see how the tool works, select Load an example.
2. Read the report. Fix items show what breaks for other people. Check items show what can break, depending on where you publish the page.
3. Fix the file and paste or drop it again. The report changes while you type.
4. Select Preview to see the page. To send it to someone, select Get a link.

### Get a link without the browser

Agents can publish the same file through the anonymous endpoint that the Get a link button uses. The response holds a preview URL, a single-use claim URL and the expiry date.

```bash
curl -X POST https://api.display.dev/v1/public/artifacts -F file=@page.html
```

## Limits

- The check reads the source only. It does not run scripts or load files, so it cannot find problems that a script causes when it runs.
- The key and token check finds common formats only. When it finds nothing, the file can still contain a secret.
- The check cannot see your computer, so it cannot tell if a relative path points to a file that exists. It reports every relative path.
- The preview runs scripts in a sandbox. Scripts cannot read your display.dev session, cookies or storage.
- The tool checks and publishes up to 5 MB of HTML. For files up to 50 MB, publish with the Display CLI.
- Get a link makes a public link. Anyone with the URL can open it for 30 days. Search engines do not index it.

## HTML share check questions

**Q: Does the check send my file to Display?**

No. The check runs in your browser. Display receives the HTML only when you select Get a link.

**Q: Why does a relative path break when I share the file?**

A path such as images/chart.png points to a file next to the HTML file on your computer. The person who opens your link does not have that file. Put the image in the page as a data URL, or use a full https:// URL.

**Q: Is my file safe to share when the report finds no keys?**

Not always. The check finds common key and token formats only. Read the source before you share it, and rotate any key that was in a file that you sent.

**Q: Why does Display block requests to other domains?**

A published page can send requests only to its own domain. An organization Owner can add other domains to the domain allowlist. This stops a shared page from sending data to a domain that the organization did not approve.

## Related tools

- [HTML viewer](https://display.dev/tools/html-viewer.md): See an HTML file as a page at phone, tablet and desktop widths.
- [CSV to HTML table](https://display.dev/tools/csv-to-html-table.md): Turn CSV or TSV into a clean HTML table that you can sort and filter.
- [All free tools](https://display.dev/tools.md)