ruby-sdk/test/mcp
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Koichi ITO 248b4d2dad Fix ReDoS vulnerability in StringUtils#underscore
## Summary

Replace regex patterns with lookahead/lookbehind assertions to prevent
catastrophic backtracking on Ruby 3.1 and earlier.

This issue only affects Ruby 3.1 and earlier. Since it does not occur on Ruby 3.2+,
it is not an issue in the current stable release (0.4.0), which does not include #206.

## Regression Testing

Ensure the regex patterns complete within 1 second for a 50,000-character input
that would otherwise trigger superlinear backtracking.
2026-01-09 01:14:52 +09:00
..
client Add Accept header validation 2026-01-07 14:55:19 +09:00
server/transports Merge pull request #207 from keisku/add-Accept-header-validation 2026-01-08 02:49:19 +09:00
tool Refactor schema validation to reduce duplication and add additionalProperties support 2025-12-12 12:49:52 +02:00
client_test.rb Support Ruby 2.7 - Ruby 3.1 2026-01-06 10:38:56 +09:00
configuration_test.rb Merge pull request #192 from koic/add_missing_assertion 2025-12-25 00:33:12 +09:00
icon_test.rb Support icons parameter 2025-12-30 05:35:22 +09:00
instrumentation_test.rb Rename test directory from model_context_protocol to mcp 2025-06-01 02:13:28 +09:00
methods_test.rb Add Elicitation skeleton 2025-11-21 02:42:20 +09:00
prompt_test.rb Support Ruby 2.7 - Ruby 3.1 2026-01-06 10:38:56 +09:00
server_context_test.rb Fix tool error handling to follow MCP spec 2025-10-21 18:33:42 -07:00
server_notification_test.rb Remove useless magic comment 2025-09-15 12:33:09 +09:00
server_test.rb Support Ruby 2.7 - Ruby 3.1 2026-01-06 10:38:56 +09:00
string_utils_test.rb Fix ReDoS vulnerability in StringUtils#underscore 2026-01-09 01:14:52 +09:00
tool_test.rb Support Ruby 2.7 - Ruby 3.1 2026-01-06 10:38:56 +09:00
transport_test.rb Remove redundant require statements 2025-08-02 00:57:31 +09:00