modelcontextprotocol/typescript-sdk
Watch
1
0
Fork
You've already forked typescript-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Validate Content-Type by parsed media type instead of substring match (v1.x) (#2444)

Browse source
This commit is contained in:
Felix Weinberger 2026-07-06 21:03:35 +01:00 • committed by GitHub
commit 69749aa508
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 271 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

6
.changeset/content-type-media-type-validation.md Normal file
View file

@ -0,0 +1,6 @@
---
'@modelcontextprotocol/sdk': patch
---
Validate `Content-Type` by its parsed media type instead of a substring match. POSTs to the Streamable HTTP server transport whose media type is not `application/json` are now rejected with `415 Unsupported Media Type` (previously any value containing the substring passed, and
valid case variants were wrongly rejected). Values with parameters (`application/json; charset=utf-8`, including malformed parameter sections like `application/json;`) continue to work, and the client's response dispatch uses the same parsed comparison.