| Filename | Latest commit message | Latest commit date |
|---|---|---|
d3a184119e
Some checks failed
Main branch checks / checks (push) Has been cancelled
* Auto-enable DNS rebinding protection for localhost servers When a FastMCP server is created with host="127.0.0.1" or "localhost" and no explicit transport_security is provided, automatically enable DNS rebinding protection. Both 127.0.0.1 and localhost are allowed as valid hosts/origins since clients may use either to connect. * Add tests for auto DNS rebinding protection on localhost Tests verify that: - Protection auto-enables for host=127.0.0.1 - Protection auto-enables for host=localhost - Both 127.0.0.1 and localhost are in allowed hosts/origins - Protection does NOT auto-enable for other hosts (e.g., 0.0.0.0) - Explicit transport_security settings are not overridden * Add IPv6 localhost (::1) support for DNS rebinding protection Extend auto-enable DNS rebinding protection to also cover IPv6 localhost. When host="::1", protection is now auto-enabled with appropriate allowed hosts ([::1]:*) and origins (http://[::1]:*). * Fix import ordering in test file |
||
| .. | ||
| auth | ||
| fastmcp | ||
| lowlevel | ||
| __init__.py | ||
| test_cancel_handling.py | ||
| test_completion_with_context.py | ||
| test_lifespan.py | ||
| test_lowlevel_exception_handling.py | ||
| test_lowlevel_input_validation.py | ||
| test_lowlevel_output_validation.py | ||
| test_lowlevel_tool_annotations.py | ||
| test_read_resource.py | ||
| test_session.py | ||
| test_session_race_condition.py | ||
| test_sse_security.py | ||
| test_stdio.py | ||
| test_streamable_http_manager.py | ||
| test_streamable_http_security.py | ||
| test_validation.py | ||