Eric Traut ff770113ca
Restrict MCP HTTP redirects to the configured origin ( #39046 ) ...
## Why
MCP requests can contain sensitive headers and tool-call bodies. Following a
cross-origin redirect could disclose them to another server.
## What changed
- Follow redirects only when every hop remains on the configured server's
origin, and require HTTPS for redirects on non-loopback hostnames.
- Preserve standard redirect method and body handling while sharing the
original timeout and enforcing a 10-hop limit.
- Avoid replaying plaintext proxy credentials across redirects, while leaving
OAuth requests that stop at redirects unchanged.
## Testing
Add coverage for same-origin and cross-origin redirects, redirect methods,
headers and bodies, proxy credentials, timeouts, hop limits, and legacy MCP
tool calls.
GitOrigin-RevId: 3e267911a1665ad8c2fc63825099a758770f4d68
2026-08-17 18:46:12 +00:00
2026-07-29 13:53:15 +00:00
2026-07-23 19:19:35 +00:00
2026-07-21 22:44:43 +00:00
2026-08-17 04:01:37 +00:00
2026-07-29 13:53:15 +00:00
2026-08-17 18:35:54 +00:00
2026-08-13 13:57:25 +00:00
2026-07-21 08:50:21 +00:00
2026-08-17 18:35:54 +00:00
2026-07-30 19:47:30 +00:00
2026-08-17 04:01:37 +00:00
2026-08-16 06:48:59 +00:00
2026-08-10 18:44:58 +00:00
2026-08-10 01:39:55 +00:00
2026-08-17 13:20:58 +00:00
2026-08-11 03:39:02 +00:00
2026-08-14 05:03:39 +00:00
2026-08-17 12:26:59 +00:00
2026-08-17 10:01:59 +00:00
2026-08-13 19:35:22 +00:00
2026-08-13 19:35:22 +00:00
2026-07-21 08:28:51 +00:00
2026-08-14 20:42:35 +00:00
2026-08-15 21:26:28 +00:00
2026-08-14 22:40:19 +00:00
2026-08-05 16:09:01 +00:00
2026-08-15 01:34:33 +00:00
2026-07-30 21:49:53 +00:00
2026-08-13 23:13:37 +00:00
2026-08-14 19:57:04 +00:00
2026-08-04 22:58:02 +00:00
2026-08-17 18:35:54 +00:00
2026-08-07 00:23:38 +00:00
2026-08-03 11:39:51 +00:00
2026-08-17 18:41:50 +00:00
2026-08-14 21:17:29 +00:00
2026-08-15 05:28:53 +00:00
2026-08-07 11:30:17 +00:00
2026-08-13 00:00:16 +00:00
2026-08-17 04:01:37 +00:00
2026-08-17 04:17:45 +00:00
2026-08-14 23:42:40 +00:00
2026-08-17 04:37:50 +00:00
2026-08-17 17:19:46 +00:00
2026-08-14 13:44:51 +00:00
2026-08-17 18:41:50 +00:00
2026-08-07 19:56:29 +00:00
2026-07-31 21:37:56 +00:00
2026-07-23 23:35:29 +00:00
2026-08-10 15:50:53 +00:00
2026-08-14 12:16:51 +00:00
2026-08-17 04:17:45 +00:00
2026-08-17 00:09:44 +00:00
2026-08-10 22:12:14 +00:00
2026-08-14 05:03:39 +00:00
2026-07-22 04:17:34 +00:00
2026-08-15 14:31:04 +00:00
2026-08-17 10:01:59 +00:00
2026-08-14 13:44:51 +00:00
2026-07-17 20:52:42 +00:00
2026-08-14 18:01:06 +00:00
2026-08-14 01:23:59 +00:00
2026-08-17 11:44:56 +00:00
2026-08-14 23:42:40 +00:00
2026-07-30 04:26:36 +00:00
2026-08-17 13:20:58 +00:00
2026-08-10 14:25:13 +00:00
2026-08-13 01:52:02 +00:00
2026-08-17 16:20:52 +00:00
2026-08-15 01:34:33 +00:00
2026-08-17 18:46:12 +00:00
2026-08-17 04:01:37 +00:00
2026-08-06 03:11:42 +00:00
2026-08-14 11:47:12 +00:00
2026-08-10 15:43:10 +00:00
2026-08-13 18:30:51 +00:00
2026-08-08 16:58:26 +00:00
2026-08-14 01:49:00 +00:00
2026-08-17 17:19:46 +00:00
2026-08-04 03:49:53 +00:00
2026-08-17 10:01:59 +00:00
2026-08-17 17:19:46 +00:00
2026-08-14 05:49:33 +00:00
2026-08-17 18:35:54 +00:00
2026-08-13 23:29:52 +00:00
2026-07-22 16:18:08 +00:00
2026-07-24 00:16:42 +00:00
2026-08-14 22:28:33 +00:00
2026-08-15 14:31:04 +00:00
2026-08-17 00:09:44 +00:00
2026-08-15 11:01:30 +00:00
2026-07-28 20:49:22 +00:00
2026-07-29 13:53:15 +00:00
2026-08-11 23:40:07 +00:00
Eric Traut
ff770113ca