Really, yes. Use plain html, no CSS, no JavaScript, CGI implemented in some boring language, and plain http without ssl on the intranet and require vpn to connect from the outside.