# Copyright (c) Streamlit Inc. (2018-2022) Snowflake Inc. (2022-2024) # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. from __future__ import annotations import os from pathlib import Path from typing import TYPE_CHECKING, Any, cast from streamlit.proto.Html_pb2 import Html as HtmlProto from streamlit.runtime.metrics_util import gather_metrics from streamlit.string_util import clean_text from streamlit.type_util import SupportsReprHtml, SupportsStr, has_callable_attr if TYPE_CHECKING: from streamlit.delta_generator import DeltaGenerator class HtmlMixin: @gather_metrics("html") def html( self, body: str | Path | SupportsStr | SupportsReprHtml, ) -> DeltaGenerator: """Insert HTML into your app. Adding custom HTML to your app impacts safety, styling, and maintainability. We sanitize HTML with `DOMPurify `_, but inserting HTML remains a developer risk. Passing untrusted code to ``st.html`` or dynamically loading external code can increase the risk of vulnerabilities in your app. ``st.html`` content is **not** iframed. Executing JavaScript is not supported at this time. Parameters ---------- body : any The HTML code to insert. This can be one of the following: - A string of HTML code. - A path to a local file with HTML code. The path can be a ``str`` or ``Path`` object. Paths can be absolute or relative to the working directory (where you execute ``streamlit run``). - Any object. If ``body`` is not a string or path, Streamlit will convert the object to a string. ``body._repr_html_()`` takes precedence over ``str(body)`` when available. Example ------- >>> import streamlit as st >>> >>> st.html( ... "

Oops!

" ... ) .. output:: https://doc-html.streamlit.app/ height: 300px """ html_proto = HtmlProto() # If body supports _repr_html_, use that. if has_callable_attr(body, "_repr_html_"): html_proto.body = cast(SupportsReprHtml, body)._repr_html_() # Check if the body is a file path. May include filesystem lookup. elif isinstance(body, Path) or _is_file(body): with open(cast(str, body), encoding="utf-8") as f: html_proto.body = f.read() # OK, let's just try converting to string and hope for the best. else: html_proto.body = clean_text(cast(SupportsStr, body)) return self.dg._enqueue("html", html_proto) @property def dg(self) -> DeltaGenerator: """Get our DeltaGenerator.""" return cast("DeltaGenerator", self) def _is_file(obj: Any) -> bool: """Checks if obj is a file, and doesn't throw if not. The "not throwing" part is important! """ try: return os.path.isfile(obj) except TypeError: return False