vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-07-26 15:21:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(gateway): reject malformed MCP sandbox policy (#110264)

Browse Source 
Co-authored-by: Patrick Erichsen <patrick.a.erichsen@gmail.com>
This commit is contained in:
Peter Steinberger
2026-07-18 02:00:46 +01:00
committed by GitHub
parent 6f0f6af62e
commit 1ca26c508d
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/gateway/mcp-app-sandbox-http.ts
View File

@@ -30,9 +30,13 @@ function handleMcpAppSandboxHttpRequest(req: IncomingMessage, res: ServerRespons
return;
}
const encodedCsp = url.searchParams.get("csp");
let csp;
try {
csp = decodeMcpAppSandboxCsp(url.searchParams.get("csp"));
csp = decodeMcpAppSandboxCsp(encodedCsp);
if (encodedCsp !== null && !csp) {
throw new Error("invalid MCP App sandbox policy");
}
} catch {
res.statusCode = 400;
res.setHeader("Content-Type", "text/plain; charset=utf-8");