# XWUIFrame

MCP Apps contract surface. Never creates an iframe, never eval, never innerHTML.

## BasicUsage

Blank host slot.

```example
file: examples/BasicUsage.ts
html: examples/BasicUsage.html
title: BasicUsage
description: Blank host slot.
```

## HttpsSrc

Allowlisted https src.

```example
file: examples/HttpsSrc.ts
html: examples/HttpsSrc.html
title: HttpsSrc
description: Allowlisted https src.
```

## ReceiveInit

Accept an allowlisted ui/initialize.

```example
file: examples/ReceiveInit.ts
html: examples/ReceiveInit.html
title: ReceiveInit
description: Accept an allowlisted ui/initialize.
```

## RefuseScript

javascript src is rewritten to about:blank.

```example
file: examples/RefuseScript.ts
html: examples/RefuseScript.html
title: RefuseScript
description: javascript src is rewritten to about:blank.
```

```api
```