From 6f73e93e9b48b15ec8cc37468e2558f562eabfee Mon Sep 17 00:00:00 2001 From: kangfenmao Date: Fri, 18 Jul 2025 12:25:25 +0800 Subject: [PATCH] fix(auth): apply URL sanitization when opening authorization link --- src/main/services/mcp/oauth/provider.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/main/services/mcp/oauth/provider.ts b/src/main/services/mcp/oauth/provider.ts index 769c5085c3..811ce8a275 100644 --- a/src/main/services/mcp/oauth/provider.ts +++ b/src/main/services/mcp/oauth/provider.ts @@ -4,8 +4,8 @@ import { loggerService } from '@logger' import { getConfigDir } from '@main/utils/file' import { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth' import { OAuthClientInformation, OAuthClientInformationFull, OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth' -import { sanitizeUrl } from 'strict-url-sanitise' import open from 'open' +import { sanitizeUrl } from 'strict-url-sanitise' import { JsonFileStorage } from './storage' import { OAuthProviderOptions } from './types' @@ -63,7 +63,7 @@ export class McpOAuthClientProvider implements OAuthClientProvider { async redirectToAuthorization(authorizationUrl: URL): Promise { try { // Open the browser to the authorization URL - await open(authorizationUrl.toString()) + await open(sanitizeUrl(authorizationUrl.toString())) logger.debug('Browser opened automatically.') } catch (error) { logger.error('Could not open browser automatically.')