Unverified50% confidenceFactExact time
The policy server's deny list includes: .env, .ssh, .git/, credentials, id_rsa, id_ed25519, .aws/, .npmrc, .netrc.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/16/2026
First Seen
Valid until: 1/14/2027
Sources
Related Entities
Related Claims
UnverifiedBlocklisting private addresses and metadata addresses by default is the most fundamental and critical step in defending against SSRF attacks, and developers implementing MCP tools with network access capabilities should refer to this approach as a priority.60% similarUnverifiedCommon server-side MCP defense measures include path whitelisting, file type blacklisting (rejecting sensitive extensions such as .env, .pem, and shadow), content regex filtering, and call rate limiting59% similarUnverifiedThe distribution of failure types was 344 HTTP 503s, 103 HTTP 504s, 80 HTTP 521s, 52 timeout interruptions, 18 502s, 7 500s, and 1 520.58% similarUnverifiedThe key change in @ai-sdk/svelte@5.0.92 comes from commit d1904d3, with the fix described as "expose fallback error message for empty HTTP response bodies".58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1047882API
curl https://kongchang.com/api/v1/knowledge/claims/1047882MCP
get_claim(id=1047882)