Skip to content

Escape server metadata in Streamable HTTP documentation HTML#42

Open
AadarshM07 wants to merge 1 commit into
nitrocloudofficial:mainfrom
AadarshM07:fix/escape-server-metadata
Open

Escape server metadata in Streamable HTTP documentation HTML#42
AadarshM07 wants to merge 1 commit into
nitrocloudofficial:mainfrom
AadarshM07:fix/escape-server-metadata

Conversation

@AadarshM07

@AadarshM07 AadarshM07 commented Jun 6, 2026

Copy link
Copy Markdown

Description

Type of Change

  • feat: New feature
  • fix: Bug fix
  • docs: Documentation update
  • refactor: Internal code change
  • test: Test-only changes
  • chore: Build, CI, or tooling changes

Related Issues

Closes #12

Changes Made

  • Escaped serverName, serverVersion, serverDescription, and mcpEndpoint using the existing escapeHtml helper.
  • Added test coverage to verify that server metadata containing HTML special characters is rendered as text rather than interpreted as markup.

Testing

  • npm test

Screenshots / Recordings

  • Executed the test coverage that checks generateDocumentationPage() method, The changes passes the test suite
image

Checklist

  • I have read and followed CONTRIBUTING.md
  • I have added/updated tests where appropriate
  • I have updated docs where appropriate
  • I have kept this PR focused and scoped
  • I have used conventional commits

@AadarshM07 AadarshM07 changed the title fix(core): escape server metadata in documentation page Escape server metadata in Streamable HTTP documentation HTML Jun 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Security] Escape server metadata in Streamable HTTP documentation HTML

1 participant