mcp-chrome

CRITICAL VULNERABILITY: The native Fastify server (`app/native-server/src/server/index.ts`) sets `cors: true` for all origins (`SERVER_CONFIG.CORS_ORIGIN`). This allows any website to send requests to the native server's HTTP endpoints (`/ask-extension`, `/mcp`), which then relays these requests to the Chrome extension to execute powerful browser automation tools (e.g., inject scripts, capture network, control browser tabs, manage history/bookmarks). This bypasses Chrome's Native Messaging security model and creates a severe Cross-Site Request Forgery (CSRF) vulnerability, allowing malicious websites to control the user's browser. Furthermore, the `chrome_inject_script` tool can inject arbitrary JavaScript into any URL if an attacker gains control, potentially leading to widespread compromise. The `file-handler.ts` allows arbitrary file downloads/saves to a temporary directory without file type validation, which could be exploited in conjunction with other vulnerabilities.