Agent-Hellboy / Agent-Hellboy/mcp-runtime
Internal/Origin IP Address Exposure in API Response
Abierto
day2-infra-hardening
platform
- Lenguaje dominante
- Go
- Estrellas
- 6
- Forks
- 1
- Merge medio
- 11 h 33 min
- PR fusionados (30 d)
- 13
Descripción
Steps to Reproduce :
1. Open the MCP Sentinel dashboard
2. Navigate to API Keys
3. Click Create Key
4. Open browser DevTools → Network tab
5. Inspect the request api-keys
6. Observe the Remote Address field
Expected Behavior:
1. The internal or origin IP address should not be exposed
2. Requests should ideally be routed via:
3. Reverse proxy / CDN (e.g., Cloudflare, Nginx)
4.Masked infrastructure endpoints
Actual Behavior :
1. Backend server IP is directly exposed in network response metadata
Guía de contribución
No hay ninguna guía de contribución indexada para este repositorio
Evaluación
Este issue todavía no se ha evaluado.