As mentioned in the documention, don't use Python's simple HTTPServer in production. Have a look at django instead: https://www.djangoproject.com/.

The Metasploit Framework provides different mixins you can use to develop a browser exploit, mainly they are [[Msf::Exploit::Remote::HttpServer|./How-to-write-a ...