modelcontextprotocol/python-sdk
Watch
1
0
Fork
You've already forked python-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
0 releases 79 tags
  • v1.23.0 d3a184119e

    Merge commit from fork
    Some checks failed
    Main branch checks / checks (push) Has been cancelled
    Details

    Ghost released this 2025-12-02 08:23:55 -05:00 | 382 commits to main since this release

    • Auto-enable DNS rebinding protection for localhost servers

    When a FastMCP server is created with host="127.0.0.1" or "localhost"
    and no explicit transport_security is provided, automatically enable
    DNS rebinding protection. Both 127.0.0.1 and localhost are allowed
    as valid hosts/origins since clients may use either to connect.

    • Add tests for auto DNS rebinding protection on localhost

    Tests verify that:

    • Protection auto-enables for host=127.0.0.1
    • Protection auto-enables for host=localhost
    • Both 127.0.0.1 and localhost are in allowed hosts/origins
    • Protection does NOT auto-enable for other hosts (e.g., 0.0.0.0)
    • Explicit transport_security settings are not overridden
    • Add IPv6 localhost (::1) support for DNS rebinding protection

    Extend auto-enable DNS rebinding protection to also cover IPv6
    localhost. When host="::1", protection is now auto-enabled with
    appropriate allowed hosts ([::1]:) and origins (http://[::1]:).

    • Fix import ordering in test file
    Downloads