ruby-sdk/lib
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Joshua J f379e13b47
fix: stop leaking exception messages to clients via JSON-RPC error data
Tool handler exceptions and anything reaching JsonRpcHandler's blind
rescue had their #message echoed into the error data member, exposing
internals to untrusted clients (CWE-209). Capability errors keep their
client-facing message by re-raising through RequestHandlerError, the
one channel whose message is deliberately surfaced.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-06 18:28:17 +02:00
..
mcp fix: stop leaking exception messages to clients via JSON-RPC error data 2026-08-06 18:28:17 +02:00
json_rpc_handler.rb fix: stop leaking exception messages to clients via JSON-RPC error data 2026-08-06 18:28:17 +02:00
mcp.rb feat: deprecate roots sampling and logging 2026-08-02 13:13:10 -04:00