fix(security): allow host headers with and without explicit port

2026-02-19 10:01:36 +11:00
parent 756ed24bfc
commit 3e177612b6
1 changed files with 5 additions and 0 deletions
--- a/server.py
+++ b/server.py
@@ -25,10 +25,15 @@ mcp = FastMCP(
    transport_security=TransportSecuritySettings(
        enable_dns_rebinding_protection=True,
        allowed_hosts=[
+            "localhost",
            "localhost:*",
+            "127.0.0.1",
            "127.0.0.1:*",
+            "knowledge-mcp",
            "knowledge-mcp:*",
+            "knowledge-mcp.knowledge-mcp.svc",
            "knowledge-mcp.knowledge-mcp.svc:*",
+            "knowledge-mcp.knowledge-mcp.svc.cluster.local",
            "knowledge-mcp.knowledge-mcp.svc.cluster.local:*",
        ],
        allowed_origins=[],