{"version":"2.1.232","anchor":"webfetch-refuses-redirects-that-leave-a-trusted-docs-path","canonical_anchor":"webfetch-refuses-redirects-that-leave-a-trusted-docs-path","heading":"WebFetch refuses redirects that leave a trusted docs path","tier":"notice","area":"WebFetch","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.232\/e\/webfetch-refuses-redirects-that-leave-a-trusted-docs-path","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.232","markdown":"### WebFetch refuses redirects that leave a trusted docs path\n\nWebFetch now blocks redirects that jump off the trusted docs path onto other pages.\n\n**What**\n\nWebFetch now rejects a redirect that stays on the same host but moves off the documentation path that made the original URL trusted, closing a way for a trusted docs entry to be used to reach unrelated pages on that host.\n\n**Details**\n\n- Matching covers the host as listed, the bare host and the `www.`-prefixed form; hostname comparison still strips a leading `www.`.\n\n**Evidence**\n\n`modelcontextprotocol.io`\n\n- Area: WebFetch\n- Tier: You'll notice\n- Useful: 4\/5\n- Signal: 3\/5"}