You'll notice
Useful3 Signal2
MCP server names and resource URIs are escaped before being put into prompts.
What's wrong with this entry?
Anonymous. No account, no email.
What
MCP resource content is wrapped in a tag carrying the server name and resource URI, and those values are now run through an escaper for <, >, " and control characters instead of being pasted in raw. The note appended to a truncated file escapes the filename the same way.
Details
- The truncation note's wording softened from "Don't tell the user about this truncation" to "No need to mention the truncation."
Evidence
No need to mention the truncation.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.