6e8ca568e4As reported in https://github.com/modelcontextprotocol/go-sdk/issues/805, case insensitive unmarshaling can pose security issues. This change adjusts all non-test and non-example unmarshaling to use a case sensitive mode. This introduces a new external dependency `github.com/segmentio/encoding`.
19 lines
452 B
Go
19 lines
452 B
Go
// Copyright 2025 The Go MCP SDK Authors. All rights reserved.
|
|
// Use of this source code is governed by an MIT-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
// Package json provides internal JSON utilities.
|
|
|
|
package json
|
|
|
|
import (
|
|
"bytes"
|
|
|
|
"github.com/segmentio/encoding/json"
|
|
)
|
|
|
|
func Unmarshal(data []byte, v any) error {
|
|
dec := json.NewDecoder(bytes.NewReader(data))
|
|
dec.DontMatchCaseInsensitiveStructFields()
|
|
return dec.Decode(v)
|
|
}
|