Skip to content

mcp: remove default cross origin protection#906

Merged
maciej-kisiel merged 1 commit intomainfrom
mkisiel/cors-fix
Apr 24, 2026
Merged

mcp: remove default cross origin protection#906
maciej-kisiel merged 1 commit intomainfrom
mkisiel/cors-fix

Conversation

@maciej-kisiel
Copy link
Copy Markdown
Contributor

Fixes #902

Copy link
Copy Markdown
Contributor

@jba jba left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

OK, but it looks like you have changes from another PR mixed in.

@maciej-kisiel
Copy link
Copy Markdown
Contributor Author

@jba Do you mean the content-type check using the more general approach in the SSE handler? I thought I will upgrade it along the way.

@maciej-kisiel maciej-kisiel merged commit 41e1f94 into main Apr 24, 2026
10 checks passed
@maciej-kisiel maciej-kisiel deleted the mkisiel/cors-fix branch April 24, 2026 09:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Reverse decisions for CORS and strict content type parsing.

2 participants