As mentioned in the documention, don't use Python's simple HTTPServer in production. Have a look at django instead: https://www.djangoproject.com/.

The Metasploit Framework provides different mixins you can use to develop a browser exploit, mainly they are Msf::Exploit::Remote::HttpServer, Msf::Exploit::Remote ...