From a446e80b5f69b58cdb4f1a5cbe6a686f207fea1e Mon Sep 17 00:00:00 2001 From: Anton Pidkuiko MacBook Date: Thu, 27 Nov 2025 16:48:07 +0000 Subject: [PATCH] fix: use camelCase for CSP domain fields in specification MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Change connect_domains and resource_domains to connectDomains and resourceDomains for consistency with the rest of the specification which uses camelCase naming convention. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude --- specification/draft/apps.mdx | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/specification/draft/apps.mdx b/specification/draft/apps.mdx index 8175c6f5..daab4276 100644 --- a/specification/draft/apps.mdx +++ b/specification/draft/apps.mdx @@ -174,8 +174,8 @@ The resource content is returned via `resources/read`: _meta?: { ui?: { csp?: { - connect_domains?: string[]; // Origins for fetch/XHR/WebSocket - resource_domains?: string[]; // Origins for images, scripts, etc + connectDomains?: string[]; // Origins for fetch/XHR/WebSocket + resourceDomains?: string[]; // Origins for images, scripts, etc }; domain?: string; prefersBorder?: boolean; @@ -228,8 +228,8 @@ Example: "_meta": { "ui" : { "csp": { - "connect_domains": ["https://api.openweathermap.org"], - "resource_domains": ["https://cdn.jsdelivr.net"] + "connectDomains": ["https://api.openweathermap.org"], + "resourceDomains": ["https://cdn.jsdelivr.net"] }, "prefersBorder": true } @@ -1111,9 +1111,9 @@ const cspValue = ` default-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; - connect-src 'self' ${csp?.connect_domains?.join(' ') || ''}; - img-src 'self' data: ${csp?.resource_domains?.join(' ') || ''}; - font-src 'self' ${csp?.resource_domains?.join(' ') || ''}; + connect-src 'self' ${csp?.connectDomains?.join(' ') || ''}; + img-src 'self' data: ${csp?.resourceDomains?.join(' ') || ''}; + font-src 'self' ${csp?.resourceDomains?.join(' ') || ''}; frame-src 'none'; object-src 'none'; base-uri 'self';