Skip to content

v2.3.0: SSRF guard for base_url overrides, consent gate for destructive/side-effect calls

Latest
Latest

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 30 Jul 03:24
v2.3.0
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
d14e1ac
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

SSRF guard for base_url overrides, consent gate for destructive/side-effect calls

  • base_url overrides on all three tools now validated as absolute http(s) URLs; an opt-in NTFY_BLOCK_PRIVATE_HOSTS (off by default) blocks reserved-address targets and refuses redirects for unregistered overrides — not protected unless you set it (#6)
  • ntfy_manage_message and ntfy_publish_message prompt for user confirmation before destructive/out-of-band side effects on clients that support MCP elicitation, STDIO only for now (#13)
  • release:github script alias added to package.json

CHANGELOG v2.3.0

Assets 3
Loading