Fix Flowise 6602: add HTTP_ALLOW_LIST for trusted SSRF hosts#6627

Open

laraib-W wants to merge 2 commits into

FlowiseAI:mainfrom

laraib-W:bugfix/mcp-ssrf-allow-list

Commits on Jul 15, 2026

Fix Flowise 6602: add HTTP_ALLOW_LIST to bypass SSRF deny list for trusted hosts

laraib-W
and
claude
committed
Normalize HTTP_ALLOW_LIST entries: strip ports and IPv6 brackets

laraib-W
and
claude
committed