Skip to content

Reject path-breaking ids in MCP tool inputs - #8843

Merged
andypalmi merged 2 commits into
mainfrom
fix/mcp-tool-id-path-guard
Oct 9, 2026
Merged

andypalmi merged 2 commits into
mainfrom
fix/mcp-tool-id-path-guard

Merge remote-tracking branch 'origin/main' into fix/mcp-tool-id-path-…

e864dc5
Select commit
Loading
Failed to load commit list.
Codecov / codecov/project succeeded Oct 9, 2026 in 1s

78.52% (+0.02%) compared to 90eed71

View this Pull Request on Codecov

78.52% (+0.02%) compared to 90eed71

Details

Codecov Report

❌ Patch coverage is 96.66667% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 78.52%. Comparing base (90eed71) to head (e864dc5).

Files with missing lines Patch % Lines
forge/ee/lib/mcp/utils.js 93.54% 2 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main    #8843      +/-   ##
==========================================
+ Coverage   78.49%   78.52%   +0.02%     
==========================================
  Files         475      475              
  Lines       25721    25760      +39     
  Branches     6849     6857       +8     
==========================================
+ Hits        20189    20227      +38     
- Misses       5532     5533       +1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.