Skip to content

Add authentication router and enhance path validation for security#322

Merged
kangyu merged 1 commit intomicrosoft:mainfrom
rhmsd:rhmsd/MSRC114156
Apr 29, 2026
Merged

Add authentication router and enhance path validation for security#322
kangyu merged 1 commit intomicrosoft:mainfrom
rhmsd:rhmsd/MSRC114156

Conversation

@rhmsd
Copy link
Copy Markdown
Contributor

@rhmsd rhmsd commented Apr 29, 2026

  • Introduced an authentication router to handle API key authentication for the Galaxy Web UI.
  • Updated server to include the new authentication router.
  • Implemented path validation utilities to prevent path traversal attacks across various components.
  • Enhanced command validation in the Linux MCP server to restrict execution of dangerous commands.
  • Added SSRF protection in web client by validating URLs against blocked IP networks.

- Introduced an authentication router to handle API key authentication for the Galaxy Web UI.
- Updated server to include the new authentication router.
- Implemented path validation utilities to prevent path traversal attacks across various components.
- Enhanced command validation in the Linux MCP server to restrict execution of dangerous commands.
- Added SSRF protection in web client by validating URLs against blocked IP networks.
@kangyu kangyu merged commit adbb38c into microsoft:main Apr 29, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants