modelcontextprotocol/registry
Watch
1
0
Fork
You've already forked registry
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(publish): escape server name to prevent HTML injection attacks

Browse source
This commit is contained in:
Avinash Sridhar 2025-05-27 21:05:25 -04:00 • committed by Toby Padilla
commit 820e0ab8b9
1 changed files with 79 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
internal/auth/github.go
View file

@ -225,6 +225,7 @@ func (g *GitHubDeviceAuth) checkOrgMembership(ctx context.Context, token, userna
// GitHub API endpoint: GET /orgs/{org}/members/{username}
// true if status code is 204 No Content
// false if status code is 404 Not Found
url := fmt.Sprint("https://api.github.com/orgs/", org, "/members/", username)
req, err := http.NewRequestWithContext(ctx, http.MethodGet, url, nil)
if err != nil {