Repository navigation

Fix SSRF in canister discovery (CWE-918): restrict outbound fetches to public https hosts - #35

Merged

aterga merged 2 commits into

mainfrom

claude/mcp-spec-compliance-9202ka

Jul 5, 2026

Merged

Fix SSRF in canister discovery (CWE-918): restrict outbound fetches to public https hosts#35
aterga merged 2 commits into
mainfrom
claude/mcp-spec-compliance-9202ka

Commits on Jul 5, 2026
- Fix SSRF in canister discovery (CWE-918)
  claude
  committed
  d034d51
- SSRF guard: catch IPv4-compatible IPv6, harden redirect policy
  claude
  committed
  af7988b