disambiguate resource in csp sample (#257)

* disambiguate resource in csp sample

Clarified comment on CSP extraction from resource metadata.

* Update specification/draft/apps.mdx

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
This commit is contained in:
Ido Salomon 2026-01-14 02:49:40 +02:00 • committed by GitHub
commit 969b905c10
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -1648,7 +1648,7 @@ Hosts MUST enforce Content Security Policies based on resource metadata.
**CSP Construction from Metadata:**
```typescript
const csp = resource._meta?.ui?.csp;
const csp = resource._meta?.ui?.csp; // `resource` is extracted from the `contents` of the `resources/read` result
const permissions = resource._meta?.ui?.permissions;
const cspValue = `