We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent e31227d commit cbd2d8bCopy full SHA for cbd2d8b
1 file changed
tests/interaction/_requirements.py
@@ -2053,13 +2053,6 @@ def __post_init__(self) -> None:
2053
"The bundled registration endpoint accepts only redirect URIs that use HTTPS or target a loopback host."
2054
),
2055
transports=("streamable-http",),
2056
- divergence=Divergence(
2057
- note=(
2058
- "Not enforced: the registration handler models redirect_uris as AnyUrl with no scheme or "
2059
- "host check, so http://evil.example/callback is accepted and registered. The spec's "
2060
- "localhost-or-HTTPS rule is left to the provider implementation."
2061
- ),
2062
2063
2064
"hosting:auth:as:token-cache-headers": Requirement(
2065
source="sdk",
0 commit comments