Skip to content

fix(mcp): add SSRF protection to OAuth metadata discovery#28112

Closed
herdiyana256 wants to merge 5 commits into
google-gemini:mainfrom
herdiyana256:fix/ssrf-dns-hostname-private-ip-bypass
Closed

fix(mcp): add SSRF protection to OAuth metadata discovery#28112
herdiyana256 wants to merge 5 commits into
google-gemini:mainfrom
herdiyana256:fix/ssrf-dns-hostname-private-ip-bypass

refactor(security): extract shared pinned-DNS dispatcher helper

f844b2f
Select commit
Loading
Failed to load commit list.
Google CLA / cla/google succeeded Jul 4, 2026 in 7s

✅ All contributors are covered under a CLA with Google

See https://cla.developers.google.com/ for more info about Google's Contributor License Agreement (CLA).

ℹ️ Googlers: Go here to view more details and manage scans for this pull request.

Details

The following contributors were found for this pull request:

f844b2f Author: @herdiyana256 <herd*******ops​@gmail.com>, <82978131+herdiyana256​@users.noreply.github.com>

(Only the first commit for a unique contributor is listed.)