@imenam/simple-scraper 1.0.22 → 1.0.23

package/README.md

@@ -389,6 +389,10 @@ Cookies are loaded from `.txt` files in [Netscape format](http://www.cookiecentr
 
 When `PROXY_URL` is set, a cookie manager web interface is registered with the MCP proxy. It allows you to list, upload, and delete cookie files through a browser UI.
 
+### Network exposure
+
+The GUI listens on `127.0.0.1` only: other machines reach it through the proxy or the gateway manager. A request guard from [`@imenam/mcp-gui-interface`](https://www.npmjs.com/package/@imenam/mcp-gui-interface) answers `403` to any request whose `Host` header is not `localhost`, `127.0.0.1` or `::1` (DNS rebinding protection), and to modifying requests (`POST`, `DELETE`…) sent from another site (foreign `Sec-Fetch-Site` or `Origin`).
+
 ## License
 
 ISC

package/dist/gui.js

@@ -3,7 +3,7 @@ import bodyParser from 'body-parser';
 import path from 'path';
 import fs from 'fs';
 import { fileURLToPath } from 'url';
-import { setupLogging, ProxyClient, IpcHub } from '@imenam/mcp-gui-interface';
+import { setupLogging, ProxyClient, IpcHub, GUI_LISTEN_HOST, expressGuiGuard } from '@imenam/mcp-gui-interface';
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 const ipc = new IpcHub(process);
 async function callMaster(type, data, timeoutMs = 5000) {
@@ -70,6 +70,7 @@ const getCookiesDir = () => {
     return cookiesDir;
 };
 const app = express();
+app.use(expressGuiGuard());
 app.use(bodyParser.json());
 app.use(express.static(path.join(rootDir, 'public/dist')));
 app.get(/^(?!\/api\/|\/proxy\/)/, (_req, res) => {
@@ -223,7 +224,7 @@ async function startServer() {
             }
         }, 500);
     });
-    const serverListener = app.listen(port, () => {
+    const serverListener = app.listen(port, GUI_LISTEN_HOST, () => {
         console.error(`[GUI] Server running at http://localhost:${port}`);
     });
     serverListener.on('error', (err) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@imenam/simple-scraper",
-  "version": "1.0.22",
+  "version": "1.0.23",
   "description": "MCP server for web scraping and JavaScript execution using Puppeteer",
   "type": "module",
   "main": "dist/index.js",
@@ -35,7 +35,7 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@imenam/mcp-gui-interface": "^1.0.12",
+    "@imenam/mcp-gui-interface": "^1.0.14",
     "@modelcontextprotocol/sdk": "^1.28.0",
     "body-parser": "^2.2.2",
     "dotenv": "^17.3.1",