github/claude-code-best
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
23ea5a67d3
claude-code-best/src/services/mcp
History
James Feng 368dd99d01 fix(security): prevent shell injection in headersHelper (#36) 
- Parse headersHelper command with shell-quote to reject operators
- Call execFileNoThrowWithCwd(cmd, args) without shell: true
- Remove shell option from ExecFileWithCwdOptions type entirely
- Add headersHelper.test.ts with injection rejection test
- Fix existing MCP test mocks for compatibility

Test: MCP tests 91/0, full suite 3058 pass (0 new failures)
2026-06-03 16:59:16 +08:00
..
__tests__ fix(security): prevent shell injection in headersHelper (#36) 2026-06-03 16:59:16 +08:00
src feat: 完成stub 2026-03-31 20:40:16 +08:00
auth.ts feat: build 2026-03-31 19:22:47 +08:00
channelAllowlist.ts feat: build 2026-03-31 19:22:47 +08:00
channelNotification.ts feat(bridge): tsc 全绿 — 补齐 Bridge/UDS/TCP/ACP 远程控制链类型 2026-06-02 11:26:11 +08:00
channelPermissions.ts feat: build 2026-03-31 19:22:47 +08:00
claudeai.ts feat: build 2026-03-31 19:22:47 +08:00
client.ts Phase 2a: mechanical dedup — import rewrite to canonical package 2026-06-03 13:54:22 +08:00
config.ts Fix Vite runtime requires for restored features 2026-06-01 21:23:28 +08:00
elicitationHandler.ts feat: build 2026-03-31 19:22:47 +08:00
envExpansion.ts feat: build 2026-03-31 19:22:47 +08:00
headersHelper.ts fix(security): prevent shell injection in headersHelper (#36) 2026-06-03 16:59:16 +08:00
InProcessTransport.ts feat: build 2026-03-31 19:22:47 +08:00
MCPConnectionManager.tsx 更新大量 tsx 原始文件; 已经迁移 login panel; 部分 (#121) 2026-04-04 23:24:27 +08:00
mcpStringUtils.ts feat: build 2026-03-31 19:22:47 +08:00
normalization.ts feat: build 2026-03-31 19:22:47 +08:00
oauthPort.ts feat: build 2026-03-31 19:22:47 +08:00
officialRegistry.ts feat: build 2026-03-31 19:22:47 +08:00
SdkControlTransport.ts feat: build 2026-03-31 19:22:47 +08:00
types.ts feat: build 2026-03-31 19:22:47 +08:00
useManageMCPConnections.ts fix: 删除 edit tool 中的旧逻辑处理， 现在已经不需要这些处理了， 大模型够屌 (#1251) 2026-06-01 23:48:26 +08:00
utils.ts Phase 2a: mechanical dedup — import rewrite to canonical package 2026-06-03 13:54:22 +08:00
vscodeSdkMcp.ts fix: 删除 edit tool 中的旧逻辑处理， 现在已经不需要这些处理了， 大模型够屌 (#1251) 2026-06-01 23:48:26 +08:00
xaa.ts feat: build 2026-03-31 19:22:47 +08:00
xaaIdpLogin.ts feat: build 2026-03-31 19:22:47 +08:00