[pull] main from modelcontextprotocol:main - #159

Merged

pull[bot] merged 1 commit into

ehtick:mainfrom

modelcontextprotocol:main

Dec 2, 2025

Commits on Dec 2, 2025

Modify Origin header validation in validateRequestHeaders (streamableHttp.ts and sse.ts) to allow requests without an Origin, as they are not relevant to server DNS rebinding protection. (#1205)
jacopoc
authored
6083600