modelcontextprotocol/ext-apps
Watch
1
0
Fork
You've already forked ext-apps
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

spec: sync object-src with default-src (#715)

Browse source
This commit is contained in:
Dominic Farolino 2026-07-16 20:15:10 -04:00 • committed by GitHub
commit 2ca6a59d2f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
specification/draft/apps.mdx
View file

@ -289,6 +289,7 @@ When `_meta.ui` is present on **both**, the content-item value takes precedence.
style-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';
img-src 'self' data:; img-src 'self' data:;
media-src 'self' data:; media-src 'self' data:;
object-src 'none';
connect-src 'none'; connect-src 'none';
``` ```