From 3e177612b6358ef618e9cfa73df03a552418bb8d Mon Sep 17 00:00:00 2001 From: ClawdBot Date: Thu, 19 Feb 2026 10:01:36 +1100 Subject: [PATCH] fix(security): allow host headers with and without explicit port --- server.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/server.py b/server.py index 382c221..88b9461 100644 --- a/server.py +++ b/server.py @@ -25,10 +25,15 @@ mcp = FastMCP( transport_security=TransportSecuritySettings( enable_dns_rebinding_protection=True, allowed_hosts=[ + "localhost", "localhost:*", + "127.0.0.1", "127.0.0.1:*", + "knowledge-mcp", "knowledge-mcp:*", + "knowledge-mcp.knowledge-mcp.svc", "knowledge-mcp.knowledge-mcp.svc:*", + "knowledge-mcp.knowledge-mcp.svc.cluster.local", "knowledge-mcp.knowledge-mcp.svc.cluster.local:*", ], allowed_origins=[],