tkmind/tkmind_go
1
0
Fork 0
Code Issues Pull Requests Actions 4 Packages Projects Releases Wiki Activity

[MCP-UI] add CSP for images to proxy HTML (#5931)

Browse Source
This commit is contained in:
Andrew Harvard
2025-12-01 12:45:01 -05:00
committed by GitHub
parent 1f4af9be3c
commit 525b304ffc
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/goose-server/src/routes/templates/mcp_ui_proxy.html
+3 -2
View File
@@ -9,6 +9,7 @@
- script-src: Allow scripts from any origin, inline, eval, wasm, and blob URLs
- style-src: Allow styles from any origin and inline styles
- font-src: Allow fonts from any origin
- img-src: Allow images from any origin
- connect-src: Allow network requests to any origin
- frame-src: Allow embedding iframes from any origin (required for proxy functionality)
- media-src: Allow audio/video media from any origin
@@ -17,7 +18,7 @@
-->
<meta
http-equiv="Content-Security-Policy"
content="default-src 'self'; script-src * 'wasm-unsafe-eval' 'unsafe-inline' 'unsafe-eval' blob:; style-src * 'unsafe-inline'; font-src *; connect-src *; frame-src *; media-src *; base-uri 'self'; upgrade-insecure-requests"/>
content="default-src 'self'; script-src * 'wasm-unsafe-eval' 'unsafe-inline' 'unsafe-eval' blob:; style-src * 'unsafe-inline'; font-src *; img-src *; connect-src *; frame-src *; media-src *; base-uri 'self'; upgrade-insecure-requests"/>
<title>MCP-UI Proxy</title>
<style>
body,
@@ -139,4 +140,4 @@
}
</script>
</body>
</html>
</html>