[PR #8207] [CLOSED] fix(landing): remove react-grab/mcp scripts that cause network scanning #7818

Closed
opened 2026-03-13 13:50:06 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/better-auth/better-auth/pull/8207
Author: @himself65
Created: 2/28/2026
Status: Closed

Base: canaryHead: fix/remove-react-grab-mcp-scripts


📝 Commits (1)

  • be13a60 fix(landing): remove react-grab/mcp scripts that cause network scanning

📊 Changes

2 files changed (+0 additions, -21 deletions)

View changed files

📝 landing/app/layout.tsx (+0 -20)
📝 landing/package.json (+0 -1)

📄 Description

Summary

  • Removed react-grab and @react-grab/mcp script tags from landing/app/layout.tsx that were causing local network device discovery/scanning for visitors
  • Removed unused next/script import and @react-grab/mcp devDependency from landing/package.json
  • The scripts used next/script with strategy="beforeInteractive" which injects into server-rendered HTML, potentially leaking past the NODE_ENV === "development" guard into production builds

Test plan

  • Verify the landing page loads correctly in dev (pnpm dev in landing/)
  • Verify no network scanning/device discovery requests in browser DevTools Network tab
  • Confirm production build (pnpm build in landing/) succeeds without errors

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/better-auth/better-auth/pull/8207 **Author:** [@himself65](https://github.com/himself65) **Created:** 2/28/2026 **Status:** ❌ Closed **Base:** `canary` ← **Head:** `fix/remove-react-grab-mcp-scripts` --- ### 📝 Commits (1) - [`be13a60`](https://github.com/better-auth/better-auth/commit/be13a60f8107f7de8f2d1727f477623c53abea70) fix(landing): remove react-grab/mcp scripts that cause network scanning ### 📊 Changes **2 files changed** (+0 additions, -21 deletions) <details> <summary>View changed files</summary> 📝 `landing/app/layout.tsx` (+0 -20) 📝 `landing/package.json` (+0 -1) </details> ### 📄 Description ## Summary - Removed `react-grab` and `@react-grab/mcp` script tags from `landing/app/layout.tsx` that were causing local network device discovery/scanning for visitors - Removed unused `next/script` import and `@react-grab/mcp` devDependency from `landing/package.json` - The scripts used `next/script` with `strategy="beforeInteractive"` which injects into server-rendered HTML, potentially leaking past the `NODE_ENV === "development"` guard into production builds ## Test plan - [ ] Verify the landing page loads correctly in dev (`pnpm dev` in `landing/`) - [ ] Verify no network scanning/device discovery requests in browser DevTools Network tab - [ ] Confirm production build (`pnpm build` in `landing/`) succeeds without errors --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-03-13 13:50:06 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#7818