4 ms·
Wh... wh... what? The problem is that ANSI escape codes aren't being stripped from text before processing, and you think a HUMAN should be doing that? That'd be
by conartist6 3mo ago
Wh... wh... what? The problem is that ANSI escape codes aren't being stripped from text before processing, and you think a HUMAN should be doing that? That'd be like having a secretary hand-check every SQL query as it arrives at the database instead of using a query builder...
- Rygian 3mo agoA human should defintely be doing that. By "that" it is understood: enforcing that the code cleans up unsafe inputs before processing them. If there is no human doing that enforcement, the code has no chance of being secure.
- conartist6 3mo agoWhy! Do you use your eyeballs to spot SQL injection? Or do you maybe use a tool? A linter perhaps?
- Rygian 3mo agoI develop my code defensively, and I argue that the developers of MCP servers need to develop their code defensively too. Not sure what it is that you intend to argue.