Security context

Highlights

Denial of Service: 7 prior fixes. Scrutinize any change in this area.

src/jcodemunch_mcp/server.py: most-fixed (5 issues). Treat as high-risk during review.

9 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Path Traversal: The directory indexing mechanism has repeatedly suffered from path traversal and infinite loops on Windows systems. Prior flaws allowed directory breakouts due to case-insensitive Windows prefixes, a lack of component-depth validation, and hang conditions when traversing NTFS junctions via standard globbing libraries. Ensure all indexers enforce robust, case-insensitive canonical prefix checks and restrict absolute path depth.

SSRF: The repository indexing tool historically resolved arbitrary external HTTP requests, creating SSRF vectors and potential token leaks. The system was patched to enforce strict host allowlists (limiting requests to github.com) and parsing constraints, making it critical that any new remote resource fetchers undergo identical host-level validation.

Auth Bypass: Shared process memory and global states previously allowed multi-client session cross-talk and unauthorized tiering bypasses. When concurrent HTTP transports are utilized, session state leaks and missing token authorization headers could permit unauthorized tools access.