Class McpAppResourceMetadata.ContentSecurityPolicy

java.lang.Object

com.soklet.McpAppResourceMetadata.ContentSecurityPolicy

Enclosing class:

McpAppResourceMetadata

@ThreadSafe
public static final class McpAppResourceMetadata.ContentSecurityPolicy
extends Object

Immutable allowlists of canonical ASCII origins, not raw CSP header sources.

Empty collections allow no additional external connection, resource, or frame origins and retain same-origin-only document base URIs. Host enforcement may impose further restrictions. A wildcard is permitted only as one leftmost DNS label, such as https://*.example.com.

Author:

Mark Allen

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final class	McpAppResourceMetadata.ContentSecurityPolicy.Builder	Mutable builder for an immutable content security policy.

Method Summary

Modifier and Type	Method	Description
static @NonNull McpAppResourceMetadata.ContentSecurityPolicy.Builder	builder()
static @NonNull McpAppResourceMetadata.ContentSecurityPolicy	defaultInstance()	Returns the immutable default policy, equivalent to builder().build().
boolean	equals(@Nullable Object other)
@NonNull Set<@NonNull String>	getBaseUriDomains()
@NonNull Set<@NonNull String>	getConnectDomains()
@NonNull Set<@NonNull String>	getFrameDomains()
@NonNull Set<@NonNull String>	getResourceDomains()
int	hashCode()
@NonNull String	toString()

Methods inherited from class Object

getClass, notify, notifyAll, wait, wait, wait

Method Details

defaultInstance

public static @NonNull McpAppResourceMetadata.ContentSecurityPolicy defaultInstance()

Returns the immutable default policy, equivalent to builder().build().

All four origin allowlists are empty: no additional external connection, resource, or frame origins are declared, and document base URIs remain same-origin-only. Enforcement belongs to the host, which may further restrict the policy.

Supplying this value explicitly emits CSP metadata. Leaving the policy unspecified omits that metadata, but still requires the host to apply restrictive defaults; omission does not disable sandbox protection.

Returns:

default content security policy

builder

public static @NonNull McpAppResourceMetadata.ContentSecurityPolicy.Builder builder()

Returns:

mutable builder with empty origin allowlists

getConnectDomains

public @NonNull Set<@NonNull String> getConnectDomains()

Returns:

immutable connection origins in canonical ASCII order

getResourceDomains

public @NonNull Set<@NonNull String> getResourceDomains()

Returns:

immutable asset origins in canonical ASCII order

getFrameDomains

public @NonNull Set<@NonNull String> getFrameDomains()

Returns:

immutable iframe origins in canonical ASCII order

getBaseUriDomains

public @NonNull Set<@NonNull String> getBaseUriDomains()

Returns:

immutable document-base origins in canonical ASCII order

equals

public boolean equals(@Nullable Object other)

Overrides:

equals in class Object

Returns:

whether all four origin allowlists match

hashCode

public int hashCode()

Overrides:

hashCode in class Object

Returns:

structural hash code

toString

public @NonNull String toString()

Overrides:

toString in class Object

Returns:

diagnostic rendering without origin values