Skip to content

fix: MCP stdio parsing for multi-line JSON-RPC - #243

Merged
ajianaz merged 1 commit into
developfrom
fix/code-scanning-mcp-stdio
Jun 10, 2026
Merged

ajianaz merged 1 commit into
developfrom
fix/code-scanning-mcp-stdio

Conversation

@ajianaz

@ajianaz ajianaz commented Jun 10, 2026

Copy link
Copy Markdown
Collaborator

Fixes Code Scanning alerts #88-90.

Replaced line-based stdin.lines() with byte-level brace-depth tracking.
Handles pretty-printed/multi-line JSON-RPC messages correctly.

Also dismissed alerts #82,85-87,91 — test fixtures containing AWS example key.

… alerts

Code Scanning fixes:
- Alert #88-90: replaced line-based stdin parsing with byte-level brace-depth
  tracking that handles pretty-printed JSON-RPC messages
- Alert #82,85-87,91: dismissed — test fixtures for secrets detection (AKIAIOSFODNN7EXAMPLE is AWS example key)
@ajianaz
ajianaz merged commit 035f104 into develop Jun 10, 2026
10 checks passed
@ajianaz
ajianaz deleted the fix/code-scanning-mcp-stdio branch June 11, 2026 07:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant