Skip to content

Fix SSRF in canister discovery (CWE-918): restrict outbound fetches to public https hosts - #35

Merged
aterga merged 2 commits into
mainfrom
claude/mcp-spec-compliance-9202ka
Jul 5, 2026
Merged

Fix SSRF in canister discovery (CWE-918): restrict outbound fetches to public https hosts#35
aterga merged 2 commits into
mainfrom
claude/mcp-spec-compliance-9202ka

SSRF guard: catch IPv4-compatible IPv6, harden redirect policy

af7988b
Select commit
Loading
Failed to load commit list.

Select a check to view from the sidebar