Running Python ASGI Apps in the Browser via Pyodide + a Service Worker
Simon Willison's Weblog2d agoTutorialSimon Willison demonstrates an experiment for running Python ASGI apps entirely in the browser using Pyodide and a Service Worker. The approach addresses a Datasette Lite limitation: HTML returned through intercepted navigation did not execute script tags, breaking features and plugins. Claude Opus 4.8, used through Claude Code for web, helped explore the implementation. Basic ASGI and Datasette 1.0a31 demos are available.
Millions of AI agents imperiled by critical vulnerability in open source package★ 78
Ars Technica AI6d agoIncidentArs Technica reports that Starlette, a Python package with about 325 million weekly downloads, has a critical vulnerability called BadHost. The flaw can let crafted Host headers confuse request.url.path, potentially bypassing middleware-based path authorization. AI infrastructure using FastAPI or Starlette, including vLLM, LiteLLM, MCP servers, LLM proxies, and agent frameworks, should upgrade Starlette and audit custom middleware.