From fce9dc1b2940ee6699d2acf0c9e56456d9899581 Mon Sep 17 00:00:00 2001 From: tanaka takashi Date: Sat, 27 Jun 2026 01:09:00 +0900 Subject: MCP server機能をセキュア化 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- src/ollama_web/config.py | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'src/ollama_web/config.py') diff --git a/src/ollama_web/config.py b/src/ollama_web/config.py index 3325446..ac567a2 100644 --- a/src/ollama_web/config.py +++ b/src/ollama_web/config.py @@ -38,6 +38,12 @@ class Settings: allowed_origins: list[str] = field( default_factory=lambda: _csv_env("OLLAMA_WEB_ALLOWED_ORIGINS") ) + mcp_stdio_allowlist: list[str] = field( + default_factory=lambda: _csv_env("OLLAMA_WEB_MCP_STDIO_ALLOWLIST") + ) + mcp_https_allowlist: list[str] = field( + default_factory=lambda: _csv_env("OLLAMA_WEB_MCP_HTTPS_ALLOWLIST") + ) ollama_timeout: float = 120.0 scrape_timeout: float = 15.0 scrape_max_chars: int = 4000 -- cgit v1.2.3