fix(mcp): validate Host and Origin on CDP relay WebSocket upgrades - #42103

Merged

Yury Semikhatsky (yury-s) merged 7 commits into

microsoft:mainfrom

yury-s:fix-mcp-1694

Aug 4, 2026

Commits on Aug 3, 2026

fix(mcp): validate Host and Origin on CDP relay WebSocket upgrades
Yury Semikhatsky (yury-s)
committed
2d8f1f3
chore(mcp): trim comments in relay upgrade validation
Yury Semikhatsky (yury-s)
committed
aa7dc12
fix: validate Host on HttpServer WebSocket upgrades, reuse in CDP relay
Yury Semikhatsky (yury-s)
committed
efe951c
fix(mcp): use WSServer in CDP relay for host and origin validation
Yury Semikhatsky (yury-s)
committed
45519df
chore: make isAllowedPathname a required WSServer delegate method
Yury Semikhatsky (yury-s)
committed
b612cdb
chore: reuse isAllowedHost from httpServer in WSServer
Yury Semikhatsky (yury-s)
committed
f0aaa97

Commits on Aug 4, 2026

chore: cleanups from code review
Yury Semikhatsky (yury-s)
committed
368e058