» Tag
protocol-security
1 postsMCP's Confused Deputy Problem: Provenance Gaps, Injection, DNS Rebinding
MCP's confused deputy flaw explained: provenance gaps, prompt injection via fetch servers, DNS rebinding, and concrete detection rules.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.com