Skip to content

Commit 21423c9

Browse files
authored
Remove DANGEROUSLY_OMIT_AUTH from dev scripts
The `DANGEROUSLY_OMIT_AUTH=true` allows any website visited by a developer to maliciously attack the MCP server running locally on the dev machine, achieving remote code execution. https://www.tenable.com/blog/how-tenable-research-discovered-a-critical-remote-code-execution-vulnerability-on-anthropic
1 parent bde2444 commit 21423c9

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

packages/agent-infra/mcp-servers/browser/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -37,9 +37,9 @@
3737
],
3838
"scripts": {
3939
"build": "shx rm -rf dist && rslib build && shx chmod +x dist/*.{js,cjs}",
40-
"dev": "DANGEROUSLY_OMIT_AUTH=true npx -y @modelcontextprotocol/inspector tsx src/index.ts",
40+
"dev": "npx -y @modelcontextprotocol/inspector tsx src/index.ts",
4141
"dev:server": "tsx --watch src/index.ts --port 3000 --vision",
42-
"dev:vision": "DANGEROUSLY_OMIT_AUTH=true npx -y @modelcontextprotocol/inspector tsx src/index.ts --vision",
42+
"dev:vision": "npx -y @modelcontextprotocol/inspector tsx src/index.ts --vision",
4343
"prepare": "npm run build",
4444
"prepublishOnly": "tsx scripts/update-readme.ts",
4545
"test": "vitest run --config=./vitest.config.mts",

0 commit comments

Comments
 (0)