ros/playwright-mcp
1
0
Fork 0
mirror of https://github.com/microsoft/playwright-mcp.git synced 2026-01-30 06:22:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(extensions): allow connections only from 127.0.0.1 (#1275)

Browse Source 
Requires https://github.com/microsoft/playwright/pull/38626
This commit is contained in:
Yury Semikhatsky
2025-12-19 18:42:34 -08:00
committed by GitHub
parent 0a6f1c4ea4
commit a0b4ffbe15
1 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
extension/src/ui/connect.tsx
View File

@@ -44,8 +44,18 @@ const ConnectApp: React.FC = () => {
const relayUrl = params.get('mcpRelayUrl');
if (!relayUrl) {
setShowButtons(false);
setStatus({ type: 'error', message: 'Missing mcpRelayUrl parameter in URL.' });
handleReject('Missing mcpRelayUrl parameter in URL.');
return;
}
try {
const host = new URL(relayUrl).hostname;
if (host !== '127.0.0.1' && host !== '[::1]') {
handleReject(`MCP extension only allows loopback connections (127.0.0.1 or [::1]). Received host: ${host}`);
return;
}
} catch (e) {
handleReject(`Invalid mcpRelayUrl parameter in URL: ${relayUrl}. ${e}`);
return;
}