Under the hood
Useful2 Signal2
Server and tool names quoted in error replies are now escaped first.
What's wrong with this entry?
Anonymous. No account, no email.
What
Error responses that quote a server or tool name back to the caller now pass that name through a sanitizing helper instead of dropping it in raw, so an odd name cannot alter the message around it.
Details
- Covers
Server not found:, the enterprise managed-policy block message,Not a fully-qualified MCP tool name:,mcp_call cancelled by client:andMCP server not connected:. - Applies on every one of those paths with no condition. What exactly the helper strips is not visible from this code.
Evidence
MCP server not connected:
Strings lifted out of the shipped bundle, so the claim above can be checked against them.