Merge pull request #46 from Molecule-AI/fix/bare-url-in-safe-mcp-advisory

fix(docs): MDX bare URL parse error in safe-mcp-advisory.mdx
This commit is contained in:
molecule-ai[bot] 2026-04-20 21:56:23 +00:00 committed by GitHub
commit 29865bf8dc
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -209,7 +209,7 @@ The mitigations in this advisory align with the following OWASP publications:
**MCP04:2025 — Software Supply Chain Attacks & Dependency Tampering**
*OWASP MCP Top 10, 2025 edition*
<https://github.com/OWASP/www-project-mcp-top-10>
[*OWASP MCP Top 10, 2025 edition*](https://github.com/OWASP/www-project-mcp-top-10)
Relevant controls that informed G-01 and G-02 mitigations:
@ -228,7 +228,7 @@ Relevant controls that informed G-01 and G-02 mitigations:
**MCP09:2025 — Shadow MCP Servers**
*OWASP MCP Top 10, 2025 edition*
<https://github.com/OWASP/www-project-mcp-top-10>
[*OWASP MCP Top 10, 2025 edition*](https://github.com/OWASP/www-project-mcp-top-10)
Relevant controls that informed the G-03 plugin allowlist mitigation:
@ -241,7 +241,7 @@ Relevant controls that informed the G-03 plugin allowlist mitigation:
**MCPS — Cryptographic Security Layer for MCP**
*OWASP MCP Top 10 Recommended Controls*
<https://github.com/OWASP/www-project-mcp-top-10/tree/master/2025/recommended-controls>
[*OWASP MCP Top 10 Recommended Controls*](https://github.com/OWASP/www-project-mcp-top-10/tree/master/2025/recommended-controls)
The MCPS specification defines the Tool Definition Signing approach referenced in
the G-02 long-term mitigation: