ceos/fastmcp
1
0
Fork 0
mirror of https://github.com/PrefectHQ/fastmcp.git synced 2026-08-21 21:14:17 +02:00
Code Issues Projects Releases Packages Wiki Activity
fastmcp/tests/utilities/openapi
History
Exact
Jeremiah Lowin 40bdfb6b1d
 fix: URL-encode path params to prevent SSRF/path traversal (GHSA-vv7q-7jx5-f767) (#3507) 
* fix: URL-encode path params in OpenAPI provider to prevent SSRF/path traversal

Co-authored-by: Claude <noreply@anthropic.com>

* Exempt too-long from core-category requirement in triage

* fix: also encode dots in path params to prevent bare .. traversal

* fix: only encode .. (not all dots) to preserve valid dotted values

* fix: encode all dots in path params to prevent single-dot normalization

* fix: check decoded path stays within prefix in double-encoding test

---------

Co-authored-by: Claude <noreply@anthropic.com>
2026-03-15 10:45:24 -04:00
..
__init__.py Switch to new OpenAPI parser as default (#2513) 2025-12-01 20:29:18 -05:00
conftest.py Switch to new OpenAPI parser as default (#2513) 2025-12-01 20:29:18 -05:00
test_allof_requestbody.py Switch to new OpenAPI parser as default (#2513) 2025-12-01 20:29:18 -05:00
test_circular_references.py Split large test files to comply with loq line limit (#3328) 2026-02-28 11:21:11 -05:00
test_direct_array_schemas.py Switch to new OpenAPI parser as default (#2513) 2025-12-01 20:29:18 -05:00
test_director.py fix: URL-encode path params to prevent SSRF/path traversal (GHSA-vv7q-7jx5-f767) (#3507) 2026-03-15 10:45:24 -04:00
test_legacy_compatibility.py Switch to new OpenAPI parser as default (#2513) 2025-12-01 20:29:18 -05:00
test_models.py Add CIMD (Client ID Metadata Document) support for OAuth (#2871) 2026-02-06 13:44:52 -05:00
test_nullable_fields.py Add loq file size limits and clean up type ignores (#2859) 2026-01-13 07:29:12 -05:00
test_parser.py Switch to new OpenAPI parser as default (#2513) 2025-12-01 20:29:18 -05:00
test_propertynames_ref_rewrite.py OpenAPI: rewrite $ref under propertyNames and patternProperties in _replace_ref_with_defs; add regression test for dict[StrEnum, Model] (#3306) 2026-02-26 16:08:54 -05:00
test_schemas.py Make $ref dereferencing optional via FastMCP(dereference_refs=...) (#3151) 2026-02-11 13:45:37 -05:00
test_transitive_references.py Split large test files to comply with loq line limit (#3328) 2026-02-28 11:21:11 -05:00