modelcontextprotocol/typescript-sdk
Watch
1
0
Fork
You've already forked typescript-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Invert variable to improve code readability

Browse source
This commit is contained in:
David Dworken 2025-05-30 09:06:01 -07:00
commit ab900839fb
No known key found for this signature in database
1 changed files with 35 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

14
src/server/streamableHttp.ts
View file

@ -75,10 +75,10 @@ export interface StreamableHTTPServerTransportOptions {
allowedOrigins?: string[];
/**
* Disable DNS rebinding protection entirely (overrides allowedHosts and allowedOrigins).
* Default is true for backwards compatibility.
* Enable DNS rebinding protection (requires allowedHosts and/or allowedOrigins to be configured).
* Default is false for backwards compatibility.
*/
disableDnsRebindingProtection?: boolean;
enableDnsRebindingProtection?: boolean;
}
/**
@ -129,7 +129,7 @@ export class StreamableHTTPServerTransport implements Transport {
private _onsessioninitialized?: (sessionId: string) => void;
private _allowedHosts?: string[];
private _allowedOrigins?: string[];
private _disableDnsRebindingProtection: boolean;
private _enableDnsRebindingProtection: boolean;
sessionId?: string | undefined;
onclose?: () => void;
@ -143,7 +143,7 @@ export class StreamableHTTPServerTransport implements Transport {
this._onsessioninitialized = options.onsessioninitialized;
this._allowedHosts = options.allowedHosts;
this._allowedOrigins = options.allowedOrigins;
this._disableDnsRebindingProtection = options.disableDnsRebindingProtection ?? true;
this._enableDnsRebindingProtection = options.enableDnsRebindingProtection ?? false;
}
/**
@ -162,8 +162,8 @@ export class StreamableHTTPServerTransport implements Transport {
* @returns Error message if validation fails, undefined if validation passes.
*/
private validateRequestHeaders(req: IncomingMessage): string | undefined {
// Skip validation if protection is disabled
if (this._disableDnsRebindingProtection) {
// Skip validation if protection is not enabled
if (!this._enableDnsRebindingProtection) {
return undefined;
}