Skip to content

Version 1.2.2

Choose a tag to compare

View all tags
@yokingma yokingma released this 26 Jun 02:42
· 11 commits to main since this release
v1.2.2
558592a

one-search-mcp v1.2.2

This release focuses on security hardening and MCP runtime updates.

What's Changed

  • Hardened browser-backed scraping against SSRF.
  • Blocked private, loopback, link-local, and other non-public network targets by default.
  • Added redirect and subresource revalidation for browser-backed tools.
  • Added ALLOW_PRIVATE_NETWORK for trusted internal scraping use cases.
  • Upgraded @modelcontextprotocol/sdk to ^1.29.0.
  • Added npm run inspector and npm run inspector:build helpers.
  • Added regression tests covering URL guarding, private-network opt-in, and package metadata safety.

Full Changelog

  • fix(security): harden browser scraping against SSRF
  • chore(mcp): add inspector scripts and bump sdk

Full Changelog: v1.2.1...v1.2.2

Assets 2
Loading