feat(fetch): add SSRF protection and comprehensive security test suite#3180
Open
Tomo1912 wants to merge 1 commit intomodelcontextprotocol:mainfrom
Open
feat(fetch): add SSRF protection and comprehensive security test suite#3180Tomo1912 wants to merge 1 commit intomodelcontextprotocol:mainfrom
Tomo1912 wants to merge 1 commit intomodelcontextprotocol:mainfrom
Conversation
12 tasks
Tomo1912
force-pushed
the
feat/security-hardening
branch
3 times, most recently
from
d0c9333 to
2892ae1
Compare
Tomo1912
force-pushed
the
feat/security-hardening
branch
from
7e6a302 to
345a570
Compare
Tomo1912
force-pushed
the
feat/security-hardening
branch
from
0e0769e to
a4ce0fc
Compare
Tomo1912
force-pushed
the
feat/security-hardening
branch
2 times, most recently
from
7703e1e to
2a2c923
Compare
This PR adds Server-Side Request Forgery (SSRF) protection and a comprehensive security test suite to the fetch MCP server. - URL scheme validation (only http/https allowed) - Private IP range blocking (10.x, 172.16-31.x, 192.168.x, 127.x, etc.) - IPv6 private address blocking (::1, fe80::, fc00::, etc.) - Dangerous hostname blocking (localhost, metadata services, etc.) - DNS resolution validation to prevent DNS rebinding - Configurable via MCP_FETCH_ALLOW_PRIVATE_IPS env var - Whitelist support via MCP_FETCH_ALLOWED_PRIVATE_HOSTS - Configurable SSL verification via MCP_FETCH_SSL_VERIFY env var - Comprehensive SSL error handling with helpful messages - SSRF protection tests - Private IP blocking tests - Input validation tests - URL scheme validation tests - Integration tests - Edge case tests ```bash export MCP_FETCH_SSL_VERIFY=false export MCP_FETCH_ALLOW_PRIVATE_IPS=true export MCP_FETCH_ALLOWED_PRIVATE_HOSTS=internal.company.com,api.local ``` fix: address security review feedback - Disable follow_redirects to prevent SSRF bypass via open redirects - Add explicit IP obfuscation detection (decimal/octal/hex formats) - Fix SSL parsing to be fail-secure (only 'false' disables verification) - Clean up test headers (remove enterprise roleplay language) - Add comprehensive tests for IP obfuscation parsing fix: add octal integer IP parsing and fix test naming - Add octal integer format parsing (017700000001 = 127.0.0.1) - Rename SSL test to reflect fail-secure behavior (stays_enabled, not defaults_to_false) - Add tests for octal integer IP obfuscation
Tomo1912
force-pushed
the
feat/security-hardening
branch
from
2a2c923 to
7aabbb4
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
This PR adds Server-Side Request Forgery (SSRF) protection and a comprehensive security test suite to the fetch MCP server.
Security Features Added
SSRF Protection
SSL Configuration
Test Suite (89 tests)
Configuration
Server Details
Motivation and Context
The fetch server can be exploited for SSRF attacks, allowing malicious actors to access internal services (cloud metadata endpoints, internal APIs, etc.). This PR adds comprehensive protection while maintaining flexibility for legitimate internal use cases through configuration options.
How Has This Been Tested?
Breaking Changes
None. All protections are backward compatible. Private IPs can be enabled via env var if needed.
Types of changes
Checklist
Additional context
This PR builds on #3179 which adds SSL verification configuration.