97310d50c5
Introduce new example implementations to replace simple-host and simple-server: - basic-host: Reference host implementation with double-iframe sandbox pattern for secure UI isolation (outer iframe validates and relays messages, inner iframe renders untrusted tool UI via srcdoc) - basic-server-react: MCP server example demonstrating tool registration with linked UI resources and React UI using the useApp() hook Build infrastructure updates: - Add build:all script and simplify CI/pre-commit to use it - Add examples:dev for watch-mode development workflow Also change PostMessageTransport logging from info to debug level. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
48 lines
1.2 KiB
HTML
48 lines
1.2 KiB
HTML
<!doctype html>
|
|
<html>
|
|
<head>
|
|
<meta charset="utf-8" />
|
|
<!-- Permissive CSP so nested content is not constrained by host CSP -->
|
|
<meta http-equiv="Content-Security-Policy" content="
|
|
default-src 'self';
|
|
img-src * data: blob: 'unsafe-inline';
|
|
media-src * blob: data:;
|
|
font-src * blob: data:;
|
|
script-src 'self'
|
|
'wasm-unsafe-eval'
|
|
'unsafe-inline'
|
|
'unsafe-eval'
|
|
blob: data: http://localhost:* https://localhost:*;
|
|
style-src * blob: data: 'unsafe-inline';
|
|
connect-src *;
|
|
frame-src * blob: data: http://localhost:* https://localhost:*;
|
|
base-uri 'self';
|
|
" />
|
|
<title>MCP-UI Proxy</title>
|
|
<style>
|
|
html,
|
|
body {
|
|
margin: 0;
|
|
height: 100vh;
|
|
width: 100vw;
|
|
}
|
|
body {
|
|
display: flex;
|
|
flex-direction: column;
|
|
}
|
|
* {
|
|
box-sizing: border-box;
|
|
}
|
|
iframe {
|
|
background-color: transparent;
|
|
border: 0px none transparent;
|
|
padding: 0px;
|
|
overflow: hidden;
|
|
flex-grow: 1;
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<script type="module" src="/src/sandbox.ts"></script>
|
|
</body>
|
|
</html>
|