Joshua J
f379e13b47
fix: stop leaking exception messages to clients via JSON-RPC error data
...
Tool handler exceptions and anything reaching JsonRpcHandler's blind
rescue had their #message echoed into the error data member, exposing
internals to untrusted clients (CWE-209). Capability errors keep their
client-facing message by re-raising through RequestHandlerError, the
one channel whose message is deliberately surfaced.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-06 18:28:17 +02:00
..
client
feat: deprecate roots sampling and logging
2026-08-02 13:13:10 -04:00
prompt
Add _meta field to resource, content, and result classes
2026-04-11 15:08:55 +09:00
resource
Add _meta field to resource, content, and result classes
2026-04-11 15:08:55 +09:00
server
Merge pull request #479 from koic/http_modern_path
2026-08-04 00:26:12 +09:00
tool
fix: preserve explicit tool response content
2026-07-23 03:11:48 +08:00
annotations_test.rb
Add audience role validation for MCP::Annotations per MCP specification
2026-06-22 01:13:17 +09:00
apps_test.rb
Add Server-Side MCP Apps Helpers per SEP-1865
2026-07-07 01:16:02 +09:00
cancellation_test.rb
Support notifications/cancelled per MCP specification
2026-05-03 04:02:22 +09:00
client_test.rb
Merge pull request #445 from rickreyhsig-wealthbox/client-tool-annotations
2026-07-28 01:21:53 +09:00
configuration_test.rb
Support 2026-07-28 as the Latest Protocol Version
2026-07-31 12:55:21 +09:00
content_test.rb
Add _meta field to resource, content, and result classes
2026-04-11 15:08:55 +09:00
error_codes_test.rb
Add Stateless Lifecycle Foundations per SEP-2575
2026-07-26 20:03:57 +09:00
icon_test.rb
Replace assert_empty with assert_equal using explicit literals
2026-02-24 16:09:34 +09:00
instrumentation_test.rb
Add around_request hook for request instrumentation
2026-04-11 13:54:47 +09:00
logging_message_notification_test.rb
Add logging support
2026-01-26 22:23:46 +09:00
methods_test.rb
Add server/discover and stateless lifecycle error codes per SEP-2575
2026-07-04 20:24:37 +09:00
progress_test.rb
Auto-set server.transport in Transport#initialize
2026-04-09 12:08:55 +09:00
prompt_test.rb
Fix Prompt#validate_arguments! crash when arguments are nil
2026-03-01 17:21:41 +09:00
protocol_deprecations_test.rb
feat: deprecate roots sampling and logging
2026-08-02 13:13:10 -04:00
request_envelope_test.rb
Add Stateless Lifecycle Foundations per SEP-2575
2026-07-26 20:03:57 +09:00
resource_template_test.rb
Support class-based Resource and ResourceTemplate definitions
2026-07-10 22:39:42 +09:00
resource_test.rb
Support class-based Resource and ResourceTemplate definitions
2026-07-10 22:39:42 +09:00
server_cancellation_test.rb
Fix an incorrect result: null response to an id-bearing notification message
2026-07-01 01:55:15 +09:00
server_context_test.rb
fix: stop leaking exception messages to clients via JSON-RPC error data
2026-08-06 18:28:17 +02:00
server_elicitation_test.rb
Associate server-to-client requests with the originating client request per SEP-2260
2026-07-12 02:10:16 +09:00
server_notification_test.rb
feat: deprecate roots sampling and logging
2026-08-02 13:13:10 -04:00
server_progress_test.rb
Auto-set server.transport in Transport#initialize
2026-04-09 12:08:55 +09:00
server_roots_test.rb
feat: deprecate roots sampling and logging
2026-08-02 13:13:10 -04:00
server_sampling_test.rb
feat: deprecate roots sampling and logging
2026-08-02 13:13:10 -04:00
server_session_ping_test.rb
Support server-to-client ping per MCP specification
2026-05-22 11:28:51 +09:00
server_test.rb
fix: stop leaking exception messages to clients via JSON-RPC error data
2026-08-06 18:28:17 +02:00
string_utils_test.rb
Fix ReDoS vulnerability in StringUtils#underscore
2026-01-09 01:14:52 +09:00
tool_test.rb
Speed Up Tool::Schema Validation by 5x to 100x
2026-06-01 21:47:30 +09:00
trace_context_test.rb
Support W3C Trace Context Propagation via _meta per SEP-414
2026-06-12 14:36:24 +09:00
transport_test.rb
Remove redundant require statements
2025-08-02 00:57:31 +09:00