63 lines
No EOL
2.1 KiB
Python
63 lines
No EOL
2.1 KiB
Python
#!/usr/bin/env python3
|
|
"""
|
|
Simple HTTP server to serve the MCP-UI proxy on port 8765
|
|
"""
|
|
|
|
import http.server
|
|
import os
|
|
import socketserver
|
|
import sys
|
|
from pathlib import Path
|
|
|
|
PORT = int(os.environ.get('PORT', '8080'))
|
|
DIRECTORY = Path(__file__).parent / 'dist'
|
|
|
|
class CustomHTTPRequestHandler(http.server.SimpleHTTPRequestHandler):
|
|
def __init__(self, *args, **kwargs):
|
|
super().__init__(*args, directory=DIRECTORY.as_posix(), **kwargs)
|
|
|
|
def end_headers(self):
|
|
# Apply custom headers only to sandbox.html
|
|
if self.path == "/sandbox.html" or self.path == "/":
|
|
# Add CORS headers to allow cross-origin requests
|
|
self.send_header("Access-Control-Allow-Origin", "*")
|
|
self.send_header("Access-Control-Allow-Methods", "GET, POST, OPTIONS")
|
|
self.send_header("Access-Control-Allow-Headers", "*")
|
|
|
|
# Add permissive CSP to allow external resources (images, styles, scripts)
|
|
csp = "; ".join(
|
|
[
|
|
"default-src 'self'",
|
|
"img-src * data: blob: 'unsafe-inline'",
|
|
"style-src * blob: data: 'unsafe-inline'",
|
|
"script-src * blob: data: 'unsafe-inline' 'unsafe-eval'",
|
|
"connect-src *",
|
|
"font-src * blob: data:",
|
|
"media-src * blob: data:",
|
|
"frame-src * blob: data:",
|
|
]
|
|
)
|
|
self.send_header("Content-Security-Policy", csp)
|
|
|
|
# Disable caching to ensure fresh content on every request
|
|
self.send_header("Cache-Control", "no-cache, no-store, must-revalidate")
|
|
self.send_header("Pragma", "no-cache")
|
|
self.send_header("Expires", "0")
|
|
|
|
super().end_headers()
|
|
|
|
|
|
def main():
|
|
print(f"Server running on: http://localhost:{PORT}")
|
|
print(f"Press Ctrl+C to stop the server\n")
|
|
|
|
with socketserver.TCPServer(("", PORT), CustomHTTPRequestHandler) as httpd:
|
|
try:
|
|
httpd.serve_forever()
|
|
except KeyboardInterrupt:
|
|
print("\n\nServer stopped.")
|
|
sys.exit(0)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main() |