You'll notice
Useful3 Signal2
MCP resource results escape hostile server names and URIs so they can't break out of the wrapper.
What's wrong with this entry?
Anonymous. No account, no email.
What
The wrapper Claude Code builds around a resource fetched from an MCP server now escapes the server name and resource URI before putting them in the text, so a hostile name or URI cannot break out of the wrapper. The empty result case now comes from the same shared builder rather than a separate inline string.
Evidence
(No content)
Strings lifted out of the shipped bundle, so the claim above can be checked against them.