Class Nexus\Mcp\Server\Transport\Http\Middleware\DnsRebindingProtectionMiddleware

`final`
`readonly`
`implements`	`MiddlewareInterface`

Guards the MCP endpoint against DNS rebinding by rejecting an unlisted Origin with an id-less JSON-RPC error on HTTP 403.

Located at Server/Transport/Http/Middleware/DnsRebindingProtectionMiddleware.php

Methods


					
	public

__construct(
	list<non-empty-string> $allowedOrigins,
	list<non-empty-string> $allowedHosts,
	ResponseFactoryInterface $responseFactory,
	StreamFactoryInterface $streamFactory,
)

Parameters

`$allowedOrigins`	Origins permitted to reach the endpoint, or `['*']` to allow any
`$allowedHosts`	Hosts permitted to reach the endpoint (empty disables `Host` validation), or `['*']` to allow any


					
	public

process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface

Namespaces

Classes

Class Nexus\Mcp\Server\Transport\Http\Middleware\DnsRebindingProtectionMiddleware

Parameters