Inject Kehto's Class-1 CSP for verified runtime-pointer srcdoc output. NIP-5D mandates the verified srcdoc and opaque sandbox, but this baseline CSP is Kehto policy rather than a protocol requirement.
Verified target HTML.
Origins the resolved target may connect to.
HTML with a CSP meta tag inserted.
Inject Kehto's Class-1 CSP for verified runtime-pointer srcdoc output. NIP-5D mandates the verified srcdoc and opaque sandbox, but this baseline CSP is Kehto policy rather than a protocol requirement.