Eric Traut ff770113ca Restrict MCP HTTP redirects to the configured origin (#39046) ...

## Why

MCP requests can contain sensitive headers and tool-call bodies. Following a
cross-origin redirect could disclose them to another server.

## What changed

- Follow redirects only when every hop remains on the configured server's
  origin, and require HTTPS for redirects on non-loopback hostnames.
- Preserve standard redirect method and body handling while sharing the
  original timeout and enforcing a 10-hop limit.
- Avoid replaying plaintext proxy credentials across redirects, while leaving
  OAuth requests that stop at redirects unchanged.

## Testing

Add coverage for same-origin and cross-origin redirects, redirect methods,
headers and bodies, proxy credentials, timeouts, hop limits, and legacy MCP
tool calls.

GitOrigin-RevId: 3e267911a1665ad8c2fc63825099a758770f4d68

2026-08-17 18:46:12 +00:00

..

bin

Include node_repl images in Guardian review evidence (#38454)

2026-08-13 23:29:52 +00:00

http_client_adapter

Use configured HTTP clients for all MCP OAuth requests (#35814)

2026-07-28 19:11:36 +00:00

oauth

Isolate MCP resource headers during OAuth requests (#39019)

2026-08-17 16:29:47 +00:00

auth_status.rs

Isolate MCP resource headers during OAuth requests (#39019)

2026-08-17 16:29:47 +00:00

elicitation_client_service.rs

Complete MCP 2026 client support (#35725)

2026-07-28 06:06:58 +00:00

event_notification_transport.rs

Add MCP event discovery and subscriptions (#37494)

2026-08-07 19:36:52 +00:00

executor_process_transport_tests.rs

Complete MCP 2026 client support (#35725)

2026-07-28 06:06:58 +00:00

executor_process_transport.rs

Complete MCP 2026 client support (#35725)

2026-07-28 06:06:58 +00:00

http_client_adapter_tests.rs

Enforce Agent Plugin runtime boundaries (#37027)

2026-08-05 04:54:33 +00:00

http_client_adapter.rs

Restrict MCP HTTP redirects to the configured origin (#39046)

2026-08-17 18:46:12 +00:00

http_client_redirect_tests.rs

Restrict MCP HTTP redirects to the configured origin (#39046)

2026-08-17 18:46:12 +00:00

http_client_redirect.rs

Restrict MCP HTTP redirects to the configured origin (#39046)

2026-08-17 18:46:12 +00:00

http_headers_tests.rs

Add dynamic HTTP header helpers for MCP servers (#38245)

2026-08-12 20:36:32 +00:00

http_headers.rs

Restrict MCP HTTP redirects to the configured origin (#39046)

2026-08-17 18:46:12 +00:00

in_process_transport.rs

feat: make built-in MCPs first-class runtime servers (#21356)

2026-05-07 10:36:32 +02:00

incoming_jsonrpc_tests.rs

Upgrade rmcp to 3.0.0 (#36001)

2026-07-29 17:38:20 +00:00

incoming_jsonrpc.rs

Upgrade rmcp to 3.0.0 (#36001)

2026-07-29 17:38:20 +00:00

lib.rs

Restrict MCP HTTP redirects to the configured origin (#39046)

2026-08-17 18:46:12 +00:00

local_stdio_transport.rs

Add MCP 2026-07-28 discovery support (#35724)

2026-07-28 05:52:12 +00:00

logging_client_handler.rs

Upgrade rmcp to 3.0.0-beta.3 (#35720)

2026-07-28 05:17:25 +00:00

oauth_client_registration_tests.rs

Isolate MCP resource headers during OAuth requests (#39019)

2026-08-17 16:29:47 +00:00

oauth_client_registration.rs

Add CIMD support to MCP OAuth registration (#38089)

2026-08-12 00:01:01 +00:00

oauth_http_client_security_tests.rs

Isolate MCP resource headers during OAuth requests (#39019)

2026-08-17 16:29:47 +00:00

oauth_http_client.rs

Isolate MCP resource headers during OAuth requests (#39019)

2026-08-17 16:29:47 +00:00

oauth.rs

Speed up MCP OAuth credential reads (#37860)

2026-08-10 17:58:15 +00:00

perform_oauth_login.rs

Isolate MCP resource headers during OAuth requests (#39019)

2026-08-17 16:29:47 +00:00

program_resolver.rs

Propagate custom CA settings to local MCP servers (#38040)

2026-08-11 17:24:04 +00:00

protocol_mode.rs

Add MCP 2026-07-28 discovery support (#35724)

2026-07-28 05:52:12 +00:00

rmcp_client.rs

Isolate MCP resource headers during OAuth requests (#39019)

2026-08-17 16:29:47 +00:00

startup_error.rs

Recover MCP servers after OAuth reauthentication (#37337)

2026-08-07 00:17:46 +00:00

stdio_server_launcher.rs

Harden local MCP server process tree cleanup (#37366)

2026-08-07 03:34:49 +00:00

streamable_http_retry_tests.rs

Recover MCP servers after OAuth reauthentication (#37337)

2026-08-07 00:17:46 +00:00

streamable_http_retry.rs

Use configured HTTP clients for all MCP OAuth requests (#35814)

2026-07-28 19:11:36 +00:00

utils.rs

Isolate MCP resource headers during OAuth requests (#39019)

2026-08-17 16:29:47 +00:00