Title: Add support for DNS rebinding protections by ddworken · Pull Request #284 · modelcontextprotocol/java-sdk · GitHub
Open Graph Title: Add support for DNS rebinding protections by ddworken · Pull Request #284 · modelcontextprotocol/java-sdk
X Title: Add support for DNS rebinding protections by ddworken · Pull Request #284 · modelcontextprotocol/java-sdk
Description: Motivation and Context This implements the mitigations described here. To avoid breaking existing applications this doesn't enable any changes by-default, but enabling this feature is heavily encouraged for any local MCP servers using the SSE transport. How Has This Been Tested? Tested via unit tests. Breaking Changes To avoid introducing any breaking changes, the DNS rebinding protections are disabled by default. Ideally we should find a way to enable them by default. But for now, adding them as disabled is a good first step. Types of changes Bug fix (non-breaking change which fixes an issue) New feature (non-breaking change which adds functionality) Breaking change (fix or feature that would cause existing functionality to change) Documentation update Checklist I have read the MCP Documentation My code follows the repository's style guidelines New and existing tests pass locally I have added appropriate error handling I have added or updated documentation as needed Additional context
Open Graph Description: Motivation and Context This implements the mitigations described here. To avoid breaking existing applications this doesn't enable any changes by-default, but enabling this feature is heavily e...
X Description: Motivation and Context This implements the mitigations described here. To avoid breaking existing applications this doesn't enable any changes by-default, but enabling this feature is heavi...
Opengraph URL: https://github.com/modelcontextprotocol/java-sdk/pull/284
X: @github
Domain: github.com
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:0584d70e-7e14-d183-376a-4770d517ebb5 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | 8DB2:26663E:6BFF2A:8A4F8F:6A5ACCBA |
| html-safe-nonce | a53e43c03e4aae39581f6eaa40b39eb04dbbe884ce15b8df7b8b03d1e9cfa573 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4REIyOjI2NjYzRTo2QkZGMkE6OEE0RjhGOjZBNUFDQ0JBIiwidmlzaXRvcl9pZCI6IjE1NjI5NTg0MzQ5NTc3MDg0NzQiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 4a81feb6726841474980a6f39b163a2363040b54ee8f0ba0e5cfbec3bea8c9c5 |
| hovercard-subject-tag | pull_request:2555094783 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/modelcontextprotocol/java-sdk/pull/284/files |
| twitter:image | https://avatars.githubusercontent.com/u/5304541?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/u/5304541?s=400&v=4 |
| og:image:alt | Motivation and Context This implements the mitigations described here. To avoid breaking existing applications this doesn't enable any changes by-default, but enabling this feature is heavily e... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 887a0902ea4987c46dd44cbc73dfadecb93a29560d7519a576fcecd81716148c |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/modelcontextprotocol/java-sdk git https://github.com/modelcontextprotocol/java-sdk.git |
| octolytics-dimension-user_id | 182288589 |
| octolytics-dimension-user_login | modelcontextprotocol |
| octolytics-dimension-repository_id | 919609219 |
| octolytics-dimension-repository_nwo | modelcontextprotocol/java-sdk |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 919609219 |
| octolytics-dimension-repository_network_root_nwo | modelcontextprotocol/java-sdk |
| turbo-body-classes | logged-out env-production page-responsive full-width |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 2606513ce6b72f8b775db6a60283f9cf7d4d70a5 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width