waleed eb2b5d6dab fix(mcp): stateful regex lastIndex bug, RFC 3986 authority parsing ...

- Remove /g flag from module-level ENV_VAR_PATTERN to avoid lastIndex state
- Create fresh regex instances per call in server-side hasEnvVarInHostname
- Fix authority extraction to terminate at /, ?, or # per RFC 3986
- Prevents bypass via https://evil.com?token={{SECRET}} (no path)
- Add test cases for query-only and fragment-only env var URLs (53 total)

2026-02-18 00:31:14 -08:00

..

docs

feat(pipedrive): added sort order to endpoints that support it, upgraded turborepo (#3237)

2026-02-17 14:58:54 -08:00

sim

fix(mcp): stateful regex lastIndex bug, RFC 3986 authority parsing

2026-02-18 00:31:14 -08:00