Grayscale/nanobot
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
3,426 Commits 1 Branch 1 Tag
edf78e7054497d63ee94cdf58fbecafbb7bba38d
Commit Graph
5 Commits
Author SHA1 Message Date
chengyongruandXubin Ren c5e053f83b fix: pin validated DNS for SSRF-safe fetches 
maintainer edit: keep MCP HTTP SSRF checks strict, pin validated DNS for direct web_fetch and HTTP/SSE MCP requests, preserve explicit and environment proxy compatibility, and cover the proxy/redirect/rebinding cases with tests.
 2026-07-07 15:40:53 +08:00
hamb1yandXubin Ren b68ae4f9bc fix: reject proxied pinned web fetches 2026-07-07 15:40:53 +08:00
Stellar鱼andXubin Ren ed0aeb1ea9 fix(mcp): reject unsafe HTTP URLs before probe 2026-06-08 16:03:57 +08:00
chengyongruandXubin Ren facdc41a16 fix: restore top-level import order 2026-06-03 16:57:29 +08:00
chengyongruandXubin Ren 6a4ed255de fix(mcp): probe HTTP port before connecting to prevent event-loop crash 
When an MCP server configured as streamableHttp or SSE is unreachable,
streamable_http_client's anyio task group cleanup raises RuntimeError /
ExceptionGroup that escapes the caller's try/except and crashes the
event loop with "Unhandled exception in event loop".

Fix: add a lightweight TCP probe (_probe_http_url) before entering the
MCP SDK transport. If the port is closed, the server is skipped with a
warning instead of crashing. stdio transport is not probed (local
process).

Closes #3739
 2026-05-13 23:39:07 +08:00