January 26, 2026
Sandbox or Sandtrap?
The Browser Is the Sandbox
Google dev says your browser can babysit wild AI—crowd cheers, skeptics clutch backups
TLDR: A Google developer argues the web browser can safely run AI helpers, showcased by a demo that works with your files without heavy installs. The crowd loves the simplicity and “battle‑tested” vibe, but wary voices warn about fragile folders and spotty docs, sparking a browser‑vs‑container showdown.
Google’s Paul Kinlan dropped a bold claim: your everyday web browser might be the safest place to run AI helpers. His demo, “Co‑do,” lets you pick a folder, plug in an LLM (large language model) key, and chat with tools that poke at your files—no giant container install needed. The community lit up. nezhar and augusteo confessed they’d missed the magical folder picker (webkitdirectory) and joked that the internet’s most battle‑tested sandbox is the one we’ve all used while clicking sketchy links for decades. Meanwhile, stevefan1999 invoked browser history lore, shouting out Google’s NaCl and WebAssembly (a fast, safe way to run code) as proof the browser was built for this. But the drama? Oh, it’s there. zephen warned that “the browser can absolutely trash any directory you give it,” pushing a nerdy workaround—git worktrees, basically a safe staging area. Others side‑eyed thin documentation for the <iframe sandbox> and across‑browser quirks, noting the File System Access API is still Chrome‑only. The vibe: massive excitement for a simpler setup, matched by paranoia about folders going kaboom. Bonus: a related rabbit hole surfaced via this link. In short, it’s browser vs. container, with memes, nostalgia, and a dash of fear.
Key Points
- •Paul Kinlan investigates using the browser as a sandbox for coding agents and builds a demo called Co-do.
- •The article maps sandbox needs to browser tech: File System Access API (filesystem), CSP with <iframe sandbox> (network), and WebAssembly in Web Workers (execution).
- •Co-do lets users select a folder and connect to an LLM provider via API key, offering a chat interface with tools for file interaction.
- •The article notes <iframe sandbox> documentation is limited and highlights a double-iframe technique to enforce network rules.
- •The webkitdirectory attribute enables read-only directory access in Firefox, Safari, and Chrome, expanding in-browser file handling.