UI Consent Bypass via Comma Injection in `addAutoApproveTarget` — User-Approval Dialog and Persistence Layer Disagree on Target Scope, Yielding Authen

Summary Burp Suite MCP Server BApp v1.2.1 fails to validate hostnames passed to `addAutoApproveTarget` (`McpConfig.kt:52`). A single user click on the per-request approval dialog persists an attacker-controlled comma-separated hostname as multiple independent allow-list entries, because …

fun addAutoApproveTarget(target: String): Boolean {
    val currentTargets = getAutoApproveTargetsList()
    if (target.trim().isNotEmpty() && !currentTargets.contains(target.trim())) {
        val newTargets = currentTargets + target.trim()
        autoApproveTargets = newTargets.joinToString(",") …