feat: composer-sidebar slot + plugin-declared frame-src origins

2026-04-25 18:40:54 +02:00
parent 5aa9b1d5f9
commit fe1d4861bb
15 changed files with 304 additions and 11 deletions
@@ -41,6 +41,11 @@ export interface ServerPlugin {
  configSchema?: Record<string, PluginConfigField>;
  installedAt: string;
  updatedAt: string;
+  /**
+   * Validated CSP origins (https-only, single-origin form) the plugin may
+   * embed. Merged into the host frame-src by the proxy.
+   */
+  frameOrigins?: string[];
 }

 export interface ServerTheme {