Skip to content

v1.1.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Sep 17:31
· 17 commits to main since this release
v1.1.1
ae4c344
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixed

  • The hosted MCP endpoint answered every request with 421 Invalid Host header. The transport enables DNS-rebinding protection whenever the app is
    built for its default 127.0.0.1 host, and then allows only localhost — so
    nothing reaching bytecrawl.vercel.app got through. That protection is for a
    server bound to your own machine; this one is public, unauthenticated and
    already behind an SSRF guard, so it now ships open. Set
    BYTECRAWL_ALLOWED_HOSTS (and BYTECRAWL_ALLOWED_ORIGINS) to turn it back on
    if you self-host on a domain that also serves authenticated apps.
Assets 2
Loading