Skip to content

Harden MCP-scoring SSRF filter + secondary-rate-limit stamping (v2) #87

Description

@IISweetHeartII

Summary

Non-blocking LOW follow-ups from the PR #86 re-review (both pre-existing severity, not regressions).

Changes

  • isPrivateHost: also block IPv4-mapped IPv6 (::ffff:127.0.0.1) and integer/hex-encoded IPv4 (http://2130706433/)
  • Stamp rateLimited on the rare legacy secondary-rate-limit 403 (remaining>0) for transparency
  • v2 gameability: add corroborating signals beyond length/keyword heuristics for description/README/usage audits

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions