mirror of
https://github.com/PrefectHQ/fastmcp.git
synced 2026-08-23 22:14:18 +02:00
40bdfb6b1d* fix: URL-encode path params in OpenAPI provider to prevent SSRF/path traversal Co-authored-by: Claude <noreply@anthropic.com> * Exempt too-long from core-category requirement in triage * fix: also encode dots in path params to prevent bare .. traversal * fix: only encode .. (not all dots) to preserve valid dotted values * fix: encode all dots in path params to prevent single-dot normalization * fix: check decoded path stays within prefix in double-encoding test --------- Co-authored-by: Claude <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| json_schema_type | ||
| openapi | ||
| __init__.py | ||
| test_async_utils.py | ||
| test_auth.py | ||
| test_cli.py | ||
| test_components.py | ||
| test_inspect.py | ||
| test_inspect_icons.py | ||
| test_json_schema.py | ||
| test_logging.py | ||
| test_skills.py | ||
| test_tests.py | ||
| test_typeadapter.py | ||
| test_types.py | ||
| test_version_check.py | ||