stacklok / toolhive / 29991678352

69%

Build Type

push

github

Committed by web-flow

Commit Message

Reject JSON-RPC batches to close authz blind spot (#5931)

JSON-RPC batches were executed by the streamable proxy and forwarded by
the transparent proxy but were invisible to authz, audit, and tool
filtering (which inspect one parsed request each), letting a batch
smuggle tool calls past Cedar policies and audit. Batching was removed in
MCP 2025-06-18 and ToolHive serves only 2025-11-25 / 2026-07-28, so
batches are now rejected (-32600, id:null, HTTP 400) in ParsingMiddleware
and — Content-Type-independently, before forwarding — in both proxy
executors; the streamable batch executor is removed.

Fixes #5745

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016WG3mSjVGWNc8nfgbkdd79

Coverage Stats

42 of 42 new or added lines in 5 files covered. (100.0%)

25 existing lines in 6 files now uncovered.

76800 of 111212 relevant lines covered (69.06%)

73.37 hits per line