sandbox/sandbox.html at main · pixie-org/sandbox · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
<!doctype html>
<html>
  <head>
    <meta charset="utf-8" />
    <!-- Permissive CSP so nested content is not constrained by host CSP -->
    <meta http-equiv="Content-Security-Policy" content="
      default-src 'self';
      img-src * data: blob: 'unsafe-inline';
      media-src * blob: data:;
      font-src * blob: data:;
      script-src 'self'
                 'wasm-unsafe-eval'
                 'unsafe-inline'
                 'unsafe-eval'
                 blob: data: http://localhost:* https://localhost:*
                 https://unpkg.com;
      style-src * blob: data: 'unsafe-inline';
      connect-src *;
      frame-src * blob: data: http://localhost:* https://localhost:*;
      base-uri 'self';
    " />
    <title>MCP-UI Proxy</title>
    <style>
      html,
      body {
        margin: 0;
        height: 100vh;
        width: 100vw;
      }
      body {
        display: flex;
        flex-direction: column;
      }
      * {
        box-sizing: border-box;
      }
      iframe {
        background-color: transparent;
        border: 0px none transparent;
        padding: 0px;
        overflow: hidden;
        flex-grow: 1;
      }
    </style>
  </head>
  <body>
    <script type="module" src="/src/lib/apps/host/sandbox.ts"></script>
  </body>
</html>