fix(mcp): replace single-IP pinning with validate-at-connect SSRF guard - #5823

Merged

waleedlatif1 merged 7 commits into

fix/mcp-ssrf-validate-at-connect

Jul 22, 2026

Commits on Jul 21, 2026

fix(mcp): replace single-IP pinning with validate-at-connect SSRF guard
waleedlatif1
committed
f6bd96b
fix(mcp): restore IPv4 preference and harden the guarded redirect follower
waleedlatif1
committed
a518963
Merge origin/staging (lockfile advisory fix + latest base)
waleedlatif1
committed
b8c5552
fix(mcp): annotate headers double-cast and cancel redirect body before throw paths
waleedlatif1
committed
b5adb51
fix(mcp): keep self-hosted private-resolving hosts unguarded (old-pin parity)
waleedlatif1
committed
ccde12e
fix(mcp): pin (not skip) self-hosted private resolutions; refuse cross-origin body forwards
waleedlatif1
committed
8ada731
chore(mcp): true up stale pinned-era doc comments
waleedlatif1
committed
616abae