Restore Cowork feature while closing the RCE vector: drop user-defined stdio commands so only hard-coded preset plugins (browsermcp) may spawn. Custom MCP now accepts remote URL only. Routes stay gated to localhost. Co-authored-by: Cursor <cursoragent@cursor.com> |
||
|---|---|---|
| .. | ||
| cliTools.js | ||
| colors.js | ||
| config.js | ||
| coworkPlugins.js | ||
| index.js | ||
| locales.js | ||
| mitmToolHosts.js | ||
| models.js | ||
| pricing.js | ||
| providers.js | ||
| skills.js | ||
| ttsProviders.js | ||