modelcontextprotocol/ruby-sdk
Watch
1
0
Fork
You've already forked ruby-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
ruby-sdk/lib/mcp
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Koichi ITO 248b4d2dad Fix ReDoS vulnerability in StringUtils#underscore 
## Summary

Replace regex patterns with lookahead/lookbehind assertions to prevent
catastrophic backtracking on Ruby 3.1 and earlier.

This issue only affects Ruby 3.1 and earlier. Since it does not occur on Ruby 3.2+,
it is not an issue in the current stable release (0.4.0), which does not include #206.

## Regression Testing

Ensure the regex patterns complete within 1 second for a 50,000-character input
that would otherwise trigger superlinear backtracking.
2026-01-09 01:14:52 +09:00
..
client Add Accept header validation 2026-01-07 14:55:19 +09:00
prompt Support Ruby 2.7 - Ruby 3.1 2026-01-06 10:38:56 +09:00
resource Support Ruby 2.7 - Ruby 3.1 2026-01-06 10:38:56 +09:00
server Merge pull request #207 from keisku/add-Accept-header-validation 2026-01-08 02:49:19 +09:00
tool Support Ruby 2.7 - Ruby 3.1 2026-01-06 10:38:56 +09:00
transports Add a migration path for Server::Transports::StdioTransport 2025-06-10 16:27:22 +09:00
client.rb Add prompts/list and prompts/get support to client 2025-10-15 13:16:41 +09:00
configuration.rb Support Ruby 2.7 - Ruby 3.1 2026-01-06 10:38:56 +09:00
content.rb Support Ruby 2.7 - Ruby 3.1 2026-01-06 10:38:56 +09:00
icon.rb Support icons parameter 2025-12-30 05:35:22 +09:00
instrumentation.rb Support Ruby 2.7 - Ruby 3.1 2026-01-06 10:38:56 +09:00
methods.rb Add Elicitation skeleton 2025-11-21 02:42:20 +09:00
prompt.rb Support Ruby 2.7 - Ruby 3.1 2026-01-06 10:38:56 +09:00
resource.rb Support icons parameter 2025-12-30 05:35:22 +09:00
resource_template.rb Support icons parameter 2025-12-30 05:35:22 +09:00
server.rb Support Ruby 2.7 - Ruby 3.1 2026-01-06 10:38:56 +09:00
string_utils.rb Fix ReDoS vulnerability in StringUtils#underscore 2026-01-09 01:14:52 +09:00
tool.rb Merge pull request #204 from koic/make_tool_names_stricter 2026-01-04 06:58:20 +09:00
transport.rb Addressing feedback 2025-06-11 13:44:54 -07:00
version.rb Release 0.4.0 2025-10-15 01:25:05 -04:00