Skip to content

mcp: restrict HTTP client redirects to same origin to prevent cross-origin redirect - #1440

Merged
guglielmo-san merged 2 commits into
mainfrom
guglielmoc/do_not_allow_redirect
Oct 23, 2026
Merged

guglielmo-san merged 2 commits into
mainfrom
guglielmoc/do_not_allow_redirect

Conversation

@guglielmo-san

Copy link
Copy Markdown
Contributor

Fixes #1429

@jeongukjae

Copy link
Copy Markdown
Contributor

thanks, seems great

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

mcp: HTTP client transports follow redirects outside the endpoint origin

3 participants