Security: safer CORS examples + avoid shell=True#2011

Open

TheodorNEngoy wants to merge 4 commits intomodelcontextprotocol:mainfrom

TheodorNEngoy:codex/harden-cors-and-open-browser

Commits on Feb 7, 2026

security: safer CORS + avoid shell exec in examples

Theodor N. Engøy
authored and
Theodor N. Engøy
committed
fix: restore _get_npx_command behavior

Theodor N. Engøy
authored and
Theodor N. Engøy
committed
test: reduce Windows flake in child process cleanup

Theodor N. Engøy
authored and
Theodor N. Engøy
committed
test: satisfy branch coverage for polling helper

Theodor N. Engøy
authored and
Theodor N. Engøy
committed