@ultimatelemon-eu/mcp-http 2.3.0 → 2.3.1

package/dist/oauth.js

@@ -274,7 +274,8 @@ export function createOAuthHandler(options, basePath) {
             u: tokens,
             ...(flow.s !== undefined ? { s: flow.s } : {})
         }, STATE_TTL_MS);
-        return htmlResponse(settingsPage(form, `${origin}${paths.settings}`, pending), 200);
+        // Browsers apply form-action to the redirect after the POST, so the client's origin must be allowed.
+        return htmlResponse(settingsPage(form, `${origin}${paths.settings}`, pending), 200, [new URL(flow.r).origin]);
     }
     async function callback(request, url) {
         const failure = url.searchParams.get('error');

package/dist/pages.d.ts

@@ -19,6 +19,6 @@ export interface SettingsForm {
     fields: SettingsField[];
 }
 export declare function escapeHtml(value: string): string;
-export declare function htmlResponse(body: string, status: number): Response;
+export declare function htmlResponse(body: string, status: number, formTargets?: readonly string[]): Response;
 export declare function errorPage(title: string, detail: string): string;
 export declare function settingsPage(form: SettingsForm, action: string, pending: string): string;

package/dist/pages.js

@@ -48,13 +48,14 @@ function page(title, body) {
 <body><main>${body}</main></body>
 </html>`;
 }
-export function htmlResponse(body, status) {
+export function htmlResponse(body, status, formTargets = []) {
+    const formAction = ["'self'", ...formTargets].join(' ');
     return new Response(body, {
         status,
         headers: {
             'content-type': 'text/html; charset=utf-8',
             'cache-control': 'no-store',
-            'content-security-policy': "default-src 'none'; style-src 'unsafe-inline'; form-action 'self'; frame-ancestors 'none'",
+            'content-security-policy': `default-src 'none'; style-src 'unsafe-inline'; form-action ${formAction}; frame-ancestors 'none'`,
             'x-frame-options': 'DENY'
         }
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ultimatelemon-eu/mcp-http",
-  "version": "2.3.0",
+  "version": "2.3.1",
   "description": "Run an MCP server over stateless Streamable HTTP: /mcp, /healthz, a base path for proxies, the caller's own API key or a stateless OAuth sign-in, and errors that never leak a stack trace.",
   "license": "MIT",
   "repository": {