Joshua J
f379e13b47
fix: stop leaking exception messages to clients via JSON-RPC error data
...
Tool handler exceptions and anything reaching JsonRpcHandler's blind
rescue had their #message echoed into the error data member, exposing
internals to untrusted clients (CWE-209). Capability errors keep their
client-facing message by re-raising through RequestHandlerError, the
one channel whose message is deliberately surfaced.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-06 18:28:17 +02:00
..
client
feat: deprecate roots sampling and logging
2026-08-02 13:13:10 -04:00
prompt
Add _meta field to resource, content, and result classes
2026-04-11 15:08:55 +09:00
resource
Add _meta field to resource, content, and result classes
2026-04-11 15:08:55 +09:00
server
Merge pull request #479 from koic/http_modern_path
2026-08-04 00:26:12 +09:00
tool
fix: preserve explicit tool response content
2026-07-23 03:11:48 +08:00
annotations.rb
Add audience role validation for MCP::Annotations per MCP specification
2026-06-22 01:13:17 +09:00
apps.rb
Add Server-Side MCP Apps Helpers per SEP-1865
2026-07-07 01:16:02 +09:00
cancellation.rb
Support notifications/cancelled per MCP specification
2026-05-03 04:02:22 +09:00
cancelled_error.rb
Support notifications/cancelled per MCP specification
2026-05-03 04:02:22 +09:00
client.rb
Merge pull request #445 from rickreyhsig-wealthbox/client-tool-annotations
2026-07-28 01:21:53 +09:00
configuration.rb
feat: deprecate roots sampling and logging
2026-08-02 13:13:10 -04:00
content.rb
Add _meta field to resource, content, and result classes
2026-04-11 15:08:55 +09:00
error_codes.rb
Add Stateless Lifecycle Foundations per SEP-2575
2026-07-26 20:03:57 +09:00
icon.rb
Fix RuboCop offenses detected with rubocop-shopify 3.0.0
2026-07-15 01:46:51 +09:00
instrumentation.rb
Fix RuboCop offenses detected with rubocop-shopify 3.0.0
2026-07-15 01:46:51 +09:00
logging_message_notification.rb
logging_message_notification: Remove unused require
2026-02-05 16:05:08 -05:00
methods.rb
Add server/discover and stateless lifecycle error codes per SEP-2575
2026-07-04 20:24:37 +09:00
progress.rb
Support POST response SSE streams for server-to-client messages
2026-04-04 19:20:31 +09:00
prompt.rb
Use autoload to defer loading of unused subsystems
2026-03-12 14:08:27 +09:00
protocol_deprecations.rb
feat: deprecate roots sampling and logging
2026-08-02 13:13:10 -04:00
request_envelope.rb
Add Stateless Lifecycle Foundations per SEP-2575
2026-07-26 20:03:57 +09:00
resource.rb
Support class-based Resource and ResourceTemplate definitions
2026-07-10 22:39:42 +09:00
resource_template.rb
Fix RuboCop offenses detected with rubocop-shopify 3.0.0
2026-07-15 01:46:51 +09:00
result_type.rb
Recognize multi round-trip input_required results per SEP-2322
2026-06-30 11:34:17 +09:00
server.rb
fix: stop leaking exception messages to clients via JSON-RPC error data
2026-08-06 18:28:17 +02:00
server_context.rb
Handle the SEP-2575 Modern Request Envelope in the Server Core
2026-07-31 10:16:41 +09:00
server_session.rb
feat: deprecate roots sampling and logging
2026-08-02 13:13:10 -04:00
string_utils.rb
Fix ReDoS vulnerability in StringUtils#underscore
2026-01-09 01:14:52 +09:00
tool.rb
Use autoload to defer loading of unused subsystems
2026-03-12 14:08:27 +09:00
trace_context.rb
Support W3C Trace Context Propagation via _meta per SEP-414
2026-06-12 14:36:24 +09:00
transport.rb
Auto-set server.transport in Transport#initialize
2026-04-09 12:08:55 +09:00
version.rb
Release 1.1.0
2026-08-01 11:29:49 +09:00