Edgar ArakelyanandClaude Fable 5.1 d6b3b67458 fix(mcp): refuse request targets whose path URL parsing would rewrite ...

Addresses the eleventh automated review finding: dot segments such as
`/public/../mcp` were canonicalized to `/mcp` before routing. The bridge now
refuses any target whose path differs after parsing, so routing sees exactly
the path the client sent.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

2026-10-18 12:38:27 -07:00

..

2356-wasm-interface-comparison

feat(wasm): compare retained core-module interfaces (#2464)

2026-10-13 23:49:04 +08:00

agent-environments/http-transport

fix(mcp): refuse request targets whose path URL parsing would rewrite

2026-10-18 12:38:27 -07:00

solidity/cbor-metadata

feat(evm): inspect lossless Solidity terminal CBOR metadata (#2790)

2026-10-13 21:55:30 +08:00