你的姓名 d290e15177 fix(plugins): fix IPv6 SSRF bypass in image-gen plugin ...

Strip brackets from hostname returned by new URL() for IPv6 literals
like [::1]. Previously the check compared against '::1' (unbracketed)
but new URL() returns '[::1]' (bracketed), allowing the SSRF block
to be bypassed.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-06-14 14:06:26 +08:00

..

.claude-plugin

feat(plugins): add image-gen MCP plugin with multi-provider fallback

2026-06-14 12:56:34 +08:00

mcp

fix(plugins): fix IPv6 SSRF bypass in image-gen plugin

2026-06-14 14:06:26 +08:00