Hi all, unfortunately we won't be progressing with a HTML/code block. Out of my own internal testing and consulting with our pen-test specialist, we cannot satisfy content safety when allowing freeform HTML/code.

We could just allow HTML, but then you wouldn't be able to pull any data in from external sources. It would just be a basic website builder in a block which isn't helpful.

Best thing to do is host your code somewhere on the internet, enable CORS for and use the 'embed webpage' block to display it. That way content is secured on your own hosting, and we wont have any bleed-in security issues from external code. Last thing we want is a compromised package leaking your sensitive data from our Studio Panels.

This decision may change in future as we find new ways to encapsulate your own running code. Perhaps we open up blocks to 3rd party developers to create, that way you could create and code your own blocks for Studio Panels. But for now, we won't be adding this block due to the reasons mentioned above :-)