mcp-gpt-proxy

The proxy forwards requests to an upstream MCP server configured via an environment variable (`MCP_SERVER_URL`). If not properly secured in deployment, using `x-forwarded-proto` and `host` headers to construct the `baseUrl` for fetching widgets could potentially be susceptible to host header manipulation (SSRF). However, the `isWidgetUri` and `extractWidgetPath` functions ensure that only pre-defined widget paths (from `proxy.config.ts`) are ever requested, significantly limiting the scope of any potential SSRF. Content Security Policy (CSP) can be configured per widget, enhancing security. No obvious hardcoded secrets or direct 'eval' of untrusted input were found. Proper deployment in a hardened environment (e.g., behind a trusted reverse proxy) is crucial.