From 8549e36dfc41aeecb4b6cdc6e079a934d507d8bd Mon Sep 17 00:00:00 2001 From: Daniel Garnier-Moiroux Date: Thu, 5 Feb 2026 17:14:12 +0100 Subject: [PATCH] Conformance testing: host validation Signed-off-by: Daniel Garnier-Moiroux --- .../conformance/server/ConformanceServlet.java | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/conformance-tests/server-servlet/src/main/java/io/modelcontextprotocol/conformance/server/ConformanceServlet.java b/conformance-tests/server-servlet/src/main/java/io/modelcontextprotocol/conformance/server/ConformanceServlet.java index 411c8ec..3d162a5 100644 --- a/conformance-tests/server-servlet/src/main/java/io/modelcontextprotocol/conformance/server/ConformanceServlet.java +++ b/conformance-tests/server-servlet/src/main/java/io/modelcontextprotocol/conformance/server/ConformanceServlet.java @@ -67,8 +67,10 @@ public class ConformanceServlet { .builder() .mcpEndpoint(MCP_ENDPOINT) .keepAliveInterval(Duration.ofSeconds(30)) - .securityValidator( - DefaultServerTransportSecurityValidator.builder().allowedOrigin("http://localhost:*").build()) + .securityValidator(DefaultServerTransportSecurityValidator.builder() + .allowedOrigin("http://localhost:*") + .allowedHost("localhost:*") + .build()) .build(); // Build server with all conformance test features