fix(mcp): validate server names with allowlist to prevent injection (fixes #1882) - #1941

Closed

willamhou wants to merge 7 commits into

nearai:mainfrom

willamhou:fix/mcp-server-name-validation

Commits on Apr 18, 2026

fix(mcp): validate server names with allowlist to prevent injection (fixes #1882)

committed
2ba751e
fix(mcp): address review — drop dot from allowlist, graceful load on invalid names

committed
dcd95d9
fix: restrict MCP server name allowlist to lowercase + preserve schema_version

committed
8c64726

Commits on Apr 19, 2026

fix(mcp): use ExtensionName as single source of truth for server name validation

committed
d6f7863
style: cargo fmt

committed
ee4f995
test(mcp): address henrypark133 review — add DB load regression (#1941)
serrrfirat
committed
346b811

Commits on Apr 25, 2026

Merge remote-tracking branch 'origin/staging' into fix/mcp-server-name-validation
willamhou
committed
08b4d79