Skip to content

fix(security): prevent arbitrary command execution in McpToolset YAML config - #923

Open
Ashutosh0x wants to merge 1 commit into
google:mainfrom
Ashutosh0x:fix/mcp-command-injection
Open

fix(security): prevent arbitrary command execution in McpToolset YAML config#923
Ashutosh0x wants to merge 1 commit into
google:mainfrom
Ashutosh0x:fix/mcp-command-injection

fix(security): replace allowlist with trust-boundary MCPServerPolicy …

e04a993
Select commit
Loading
Failed to load commit list.
Google CLA / cla/google succeeded Jun 11, 2026 in 7s

✅ All contributors are covered under a CLA with Google

See https://cla.developers.google.com/ for more info about Google's Contributor License Agreement (CLA).

ℹ️ Googlers: Go here to view more details and manage scans for this pull request.

Details

The following contributors were found for this pull request:

e04a993 Author: @Ashutosh0x <ashut**********ngh0x​@gmail.com>

(Only the first commit for a unique contributor is listed.)