Skip to content

fix(server): enable DNS rebinding protection by default - #2676

Draft
ez-lbz wants to merge 3 commits into
modelcontextprotocol:mainfrom
ez-lbz:fix/dns-rebinding-protection-default-on
Draft

ez-lbz wants to merge 3 commits into
modelcontextprotocol:mainfrom
ez-lbz:fix/dns-rebinding-protection-default-on

fix(server): validate Host header by default without breaking CORS ho…

e6fce4c
Select commit
Loading
Failed to load commit list.
pkg.pr.new / Continuous Releases succeeded Aug 16, 2026 in 0s

Successful

Published successfully.

Details

Open in StackBlitz

@modelcontextprotocol/client

npm i https://pkg.pr.new/@modelcontextprotocol/client@e6fce4c

@modelcontextprotocol/codemod

npm i https://pkg.pr.new/@modelcontextprotocol/codemod@e6fce4c

@modelcontextprotocol/core

npm i https://pkg.pr.new/@modelcontextprotocol/core@e6fce4c

@modelcontextprotocol/server

npm i https://pkg.pr.new/@modelcontextprotocol/server@e6fce4c

@modelcontextprotocol/server-legacy

npm i https://pkg.pr.new/@modelcontextprotocol/server-legacy@e6fce4c

@modelcontextprotocol/express

npm i https://pkg.pr.new/@modelcontextprotocol/express@e6fce4c

@modelcontextprotocol/fastify

npm i https://pkg.pr.new/@modelcontextprotocol/fastify@e6fce4c

@modelcontextprotocol/hono

npm i https://pkg.pr.new/@modelcontextprotocol/hono@e6fce4c

@modelcontextprotocol/node

npm i https://pkg.pr.new/@modelcontextprotocol/node@e6fce4c