Talking about html rendering is very similar to a domain I've been thinking about: configs.

Lua can be trivially sandboxed. Throw in a parser for acquiring metadata (dependencies) and you have a full blown config language in a few hundred LoC

https://github.com/civboot/civlua/tree/main/luck

I love Lua