Conformance testing: host validation

Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>
2026-02-05 17:14:12 +01:00 · 2026-02-05 17:14:12 +01:00 · 8549e36dfc
commit 8549e36dfc
parent f6c3fde7f4
1 changed files with 4 additions and 2 deletions
--- a/conformance-tests/server-servlet/src/main/java/io/modelcontextprotocol/conformance/server/ConformanceServlet.java
+++ b/conformance-tests/server-servlet/src/main/java/io/modelcontextprotocol/conformance/server/ConformanceServlet.java
@ -67,8 +67,10 @@ public class ConformanceServlet {
 			.builder()
 			.mcpEndpoint(MCP_ENDPOINT)
 			.keepAliveInterval(Duration.ofSeconds(30))
-			.securityValidator(
-					DefaultServerTransportSecurityValidator.builder().allowedOrigin("http://localhost:*").build())
+			.securityValidator(DefaultServerTransportSecurityValidator.builder()
+				.allowedOrigin("http://localhost:*")
+				.allowedHost("localhost:*")
+				.build())
 			.build();

 		// Build server with all conformance test features