{"_id":"mcp-sanitizer","_rev":"12-8197ea3c5eb724e0d9d4d2e7c4a6ec2a","name":"mcp-sanitizer","dist-tags":{"latest":"1.4.2"},"versions":{"1.0.0":{"name":"mcp-sanitizer","version":"1.0.0","keywords":["mcp","security","sanitization","model-context-protocol","input-validation","command-injection","sql-injection","xss-prevention","escape-html","sqlstring","shell-quote","validator","express-middleware","fastify-plugin","koa-middleware","security-policies"],"author":{"name":"starman69"},"license":"MIT","_id":"mcp-sanitizer@1.0.0","maintainers":[{"name":"starman69","email":"dave@pattens.org"}],"homepage":"https://github.com/starman69/mcp-sanitizer#readme","bugs":{"url":"https://github.com/starman69/mcp-sanitizer/issues"},"dist":{"shasum":"37759be1251c927c56d767b9db0d313118f87457","tarball":"https://registry.npmjs.org/mcp-sanitizer/-/mcp-sanitizer-1.0.0.tgz","fileCount":49,"integrity":"sha512-vf68xBwRwvLHmVkXdaQ28uWenfItic0t01R5G4WIquVo4u5wqVhDOZv8QvRUa044aAcBCdMJkBUiOVESHXDfPw==","signatures":[{"sig":"MEQCICdSysQM7381VWav/3t5fUuta4LAbAsfvzkzANA1zfnwAiAoe2IB0Tgu5Cmqyro1dwqACvTY4S7rhJX/xoOC7axC+A==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":442080},"main":"src/index.js","engines":{"node":">=18.19.0"},"gitHead":"87de97aac415aabececcea626c124301b9081f74","scripts":{"lint":"eslint src/ test/","test":"jest","test:watch":"jest --watch","test:coverage":"jest --coverage","security-audit":"npm audit && snyk test"},"_npmUser":{"name":"starman69","email":"dave@pattens.org"},"repository":{"url":"git+https://github.com/starman69/mcp-sanitizer.git","type":"git"},"_npmVersion":"10.9.2","description":"Comprehensive security sanitization library for Model Context Protocol (MCP) servers with trusted security libraries","directories":{},"_nodeVersion":"22.13.0","dependencies":{"sqlstring":"^2.3.3","validator":"^13.15.15","escape-html":"^1.0.3","shell-quote":"^1.8.3","path-is-inside":"^1.0.2","sanitize-filename":"^1.6.3"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","snyk":"^1.1248.0","eslint":"^8.54.0","benchmark":"^2.1.4","supertest":"^6.3.3","eslint-config-standard":"^17.1.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp-sanitizer_1.0.0_1754421276256_0.5487720038186776","host":"s3://npm-registry-packages-npm-production"}},"1.1.0":{"name":"mcp-sanitizer","version":"1.1.0","keywords":["mcp","security","sanitization","model-context-protocol","input-validation","command-injection","sql-injection","xss-prevention","escape-html","sqlstring","shell-quote","validator","express-middleware","fastify-plugin","koa-middleware","security-policies"],"author":{"name":"starman69"},"license":"MIT","_id":"mcp-sanitizer@1.1.0","maintainers":[{"name":"starman69","email":"dave@pattens.org"}],"homepage":"https://github.com/starman69/mcp-sanitizer#readme","bugs":{"url":"https://github.com/starman69/mcp-sanitizer/issues"},"dist":{"shasum":"567cbc2704de3bbd0aa608dbe60f1a0f3073d554","tarball":"https://registry.npmjs.org/mcp-sanitizer/-/mcp-sanitizer-1.1.0.tgz","fileCount":67,"integrity":"sha512-HQeBTMG2JnTLCIAlqpJ/y1R0AuYbgzXXMVleM6uImZGOTk3qOZaA47c+fazQRR4djGKH+sk3hyuXTJeal+ubow==","signatures":[{"sig":"MEUCIQDUi0qocxjca+juIYSYy1VHYnkrN+fXj+lDDX4rNfuTkwIgLgRBCYnDL+QXLU5UQwdEIb/kXWb0liAsBTmZ2aoH0k8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":639672},"main":"src/index.js","engines":{"node":">=18.19.0"},"gitHead":"94366b83284df2c785cef5d69426934f4e6fcb07","scripts":{"lint":"eslint src/ test/","test":"jest","test:watch":"jest --watch","test:coverage":"jest --coverage","security-audit":"npm audit && snyk test"},"_npmUser":{"name":"starman69","email":"dave@pattens.org"},"repository":{"url":"git+https://github.com/starman69/mcp-sanitizer.git","type":"git"},"_npmVersion":"10.9.2","description":"Comprehensive security sanitization library for Model Context Protocol (MCP) servers with trusted security libraries","directories":{},"_nodeVersion":"22.13.0","dependencies":{"sqlstring":"^2.3.3","validator":"^13.15.15","escape-html":"^1.0.3","shell-quote":"^1.8.3","path-is-inside":"^1.0.2","sanitize-filename":"^1.6.3"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","snyk":"^1.1248.0","eslint":"^8.54.0","benchmark":"^2.1.4","supertest":"^6.3.3","eslint-config-standard":"^17.1.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp-sanitizer_1.1.0_1755961387830_0.5071064069075704","host":"s3://npm-registry-packages-npm-production"}},"1.2.0":{"name":"mcp-sanitizer","version":"1.2.0","keywords":["mcp","security","sanitization","model-context-protocol","input-validation","command-injection","sql-injection","xss-prevention","escape-html","sqlstring","shell-quote","validator","express-middleware","fastify-plugin","koa-middleware","security-policies"],"author":{"name":"starman69"},"license":"MIT","_id":"mcp-sanitizer@1.2.0","maintainers":[{"name":"starman69","email":"dave@pattens.org"}],"homepage":"https://github.com/starman69/mcp-sanitizer#readme","bugs":{"url":"https://github.com/starman69/mcp-sanitizer/issues"},"dist":{"shasum":"373928c514df8877a91016e3f729353ce620e1d6","tarball":"https://registry.npmjs.org/mcp-sanitizer/-/mcp-sanitizer-1.2.0.tgz","fileCount":79,"integrity":"sha512-3ALc75d4slk0nbFsQV2DTptafgmDFYJpIeXGs3fsOIVCbdOZ4CEr0xfC1C7rY1jtDR1R7M4YBE2Zg0GVnVn82w==","signatures":[{"sig":"MEUCIQDaa6n6M/t3z9FAY5c+asnDEXmzBnCwqmJnFGuUBi0/4AIgRIltu1ub/n9BFG97AflM1s756mWnVxEafbKbUpH1QS8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":869812},"main":"src/index.js","engines":{"node":">=18.19.0"},"gitHead":"83e7d5c436a99730e9ec21e897c230fd528ac3aa","scripts":{"lint":"eslint src/ test/","test":"jest","test:watch":"jest --watch","test:coverage":"jest --coverage","security-audit":"npm audit && snyk test"},"_npmUser":{"name":"starman69","email":"dave@pattens.org"},"repository":{"url":"git+https://github.com/starman69/mcp-sanitizer.git","type":"git"},"_npmVersion":"10.9.2","description":"Comprehensive security sanitization library for Model Context Protocol (MCP) servers with trusted security libraries","directories":{},"_nodeVersion":"22.13.0","dependencies":{"unorm":"^1.6.0","sqlstring":"^2.3.3","validator":"^13.15.15","escape-html":"^1.0.3","shell-quote":"^1.8.3","path-is-inside":"^1.0.2","sanitize-filename":"^1.6.3"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","snyk":"^1.1248.0","eslint":"^8.54.0","benchmark":"^2.1.4","supertest":"^6.3.3","eslint-config-standard":"^17.1.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp-sanitizer_1.2.0_1756021986529_0.5804290946894108","host":"s3://npm-registry-packages-npm-production"}},"1.3.0":{"name":"mcp-sanitizer","version":"1.3.0","keywords":["mcp","security","sanitization","model-context-protocol","input-validation","command-injection","sql-injection","xss-prevention","escape-html","sqlstring","shell-quote","validator","express-middleware","fastify-plugin","koa-middleware","security-policies"],"author":{"name":"starman69"},"license":"MIT","_id":"mcp-sanitizer@1.3.0","maintainers":[{"name":"starman69","email":"dave@pattens.org"}],"homepage":"https://github.com/starman69/mcp-sanitizer#readme","bugs":{"url":"https://github.com/starman69/mcp-sanitizer/issues"},"dist":{"shasum":"cb66aa62a9fdcddf5e104ba58ae5eabd78d95da2","tarball":"https://registry.npmjs.org/mcp-sanitizer/-/mcp-sanitizer-1.3.0.tgz","fileCount":35,"integrity":"sha512-G5udGaLO0GufhYRW7qtOCFtM/nrdwUDO5oYIztz63n1AiX/q6EA0I58jWW3WizhM8yggKc0JebUGfEwQ5yGm2g==","signatures":[{"sig":"MEQCIA4Me4jbR9sk+1PhOQNeXoUmENGCGc/vMRPfwA5fGoxMAiBrc7bbsQz5qqGbVw0srQSwVp+0hOfK6ezczqRqUEtR4w==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/mcp-sanitizer@1.3.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":505711},"main":"src/index.js","engines":{"node":">=20.0.0"},"gitHead":"0642daec0e62a7cfe7fa383d38a99ec11efbef2b","scripts":{"lint":"eslint src/ test/","test":"jest","test:watch":"jest --watch","test:coverage":"jest --coverage","security-audit":"npm audit && snyk test"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:26a9ff45-eb92-4fca-ae35-1e4c94ff51a4"}},"repository":{"url":"git+https://github.com/starman69/mcp-sanitizer.git","type":"git"},"_npmVersion":"11.9.0","description":"Comprehensive security sanitization library for Model Context Protocol (MCP) servers with trusted security libraries","directories":{},"_nodeVersion":"20.20.0","dependencies":{"unorm":"^1.6.0","sqlstring":"^2.3.3","validator":"^13.15.22","escape-html":"^1.0.3","shell-quote":"^1.8.3","path-is-inside":"^1.0.2","sanitize-filename":"^1.6.3"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","snyk":"^1.1248.0","eslint":"^8.54.0","benchmark":"^2.1.4","supertest":"^6.3.3","eslint-config-standard":"^17.1.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp-sanitizer_1.3.0_1770700262436_0.42976310758331127","host":"s3://npm-registry-packages-npm-production"}},"1.3.1":{"name":"mcp-sanitizer","version":"1.3.1","keywords":["mcp","security","sanitization","model-context-protocol","input-validation","command-injection","sql-injection","xss-prevention","escape-html","sqlstring","shell-quote","validator","express-middleware","fastify-plugin","koa-middleware","security-policies"],"author":{"name":"starman69"},"license":"MIT","_id":"mcp-sanitizer@1.3.1","maintainers":[{"name":"starman69","email":"dave@pattens.org"}],"homepage":"https://github.com/starman69/mcp-sanitizer#readme","bugs":{"url":"https://github.com/starman69/mcp-sanitizer/issues"},"dist":{"shasum":"77c9eaaef3ffd8e3cabaa26683b7638faa271ec6","tarball":"https://registry.npmjs.org/mcp-sanitizer/-/mcp-sanitizer-1.3.1.tgz","fileCount":35,"integrity":"sha512-oWXj1jK5Z/zG1dLf5RehAXbOIU7cz9cKax5zNPZRiz62RhBHyW76WW/5q+7Pzo3K2n42fZW1zR8yTdSZ6F5FTA==","signatures":[{"sig":"MEYCIQD18iaNVpfah1FtooSixj8dSuaWN8//BgHiply82BfCTgIhALGZYG+wxOsvmpc0/ThJN+0D8ZKl0W4xquoMuvzK5KFF","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/mcp-sanitizer@1.3.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":505660},"main":"src/index.js","engines":{"node":">=20.0.0"},"gitHead":"6afd967efdffb7f03a1c770911188fdeb8df2de6","scripts":{"lint":"eslint src/ test/","test":"jest","test:watch":"jest --watch","test:coverage":"jest --coverage","security-audit":"npm audit && snyk test"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:26a9ff45-eb92-4fca-ae35-1e4c94ff51a4"}},"overrides":{"qs":">=6.14.2"},"repository":{"url":"git+https://github.com/starman69/mcp-sanitizer.git","type":"git"},"_npmVersion":"11.11.0","description":"Comprehensive security sanitization library for Model Context Protocol (MCP) servers with trusted security libraries","directories":{},"_nodeVersion":"20.20.0","dependencies":{"unorm":"^1.6.0","sqlstring":"^2.3.3","validator":"^13.15.22","escape-html":"^1.0.3","shell-quote":"^1.8.3","path-is-inside":"^1.0.2","sanitize-filename":"^1.6.3"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","snyk":"^1.1248.0","eslint":"^8.54.0","benchmark":"^2.1.4","supertest":"^6.3.3","eslint-config-standard":"^17.1.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp-sanitizer_1.3.1_1772328794928_0.8959093458942999","host":"s3://npm-registry-packages-npm-production"}},"1.3.2":{"name":"mcp-sanitizer","version":"1.3.2","keywords":["mcp","security","sanitization","model-context-protocol","input-validation","command-injection","sql-injection","xss-prevention","escape-html","sqlstring","shell-quote","validator","express-middleware","fastify-plugin","koa-middleware","security-policies"],"author":{"name":"starman69"},"license":"MIT","_id":"mcp-sanitizer@1.3.2","maintainers":[{"name":"starman69","email":"dave@pattens.org"}],"homepage":"https://github.com/starman69/mcp-sanitizer#readme","bugs":{"url":"https://github.com/starman69/mcp-sanitizer/issues"},"dist":{"shasum":"bfebf38d724fbe130a1ed62b089c8e36d5a7fb98","tarball":"https://registry.npmjs.org/mcp-sanitizer/-/mcp-sanitizer-1.3.2.tgz","fileCount":35,"integrity":"sha512-Yf56Qo/m5KfZzgGrsWUPvCJsCABiizxBg0QWd94z15wQkW8hxtr1Hh8nkqMykx1+T1T/wKJfdBX08TKxvZsbbQ==","signatures":[{"sig":"MEUCIQChfNHIvdbQxXEWJdKpUx370PLekAcbIvM+cFFUpONDqAIgFTWd8B4eWJ5dHD+hbl33DDs0WOFiOlErTzYomfhCHwM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/mcp-sanitizer@1.3.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":505686},"main":"src/index.js","engines":{"node":">=20.0.0"},"gitHead":"94386d2a60f7025f0189c50f80f8f76f6e518adc","scripts":{"lint":"eslint src/ test/","test":"jest","test:watch":"jest --watch","test:coverage":"jest --coverage","security-audit":"npm audit && snyk test"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:26a9ff45-eb92-4fca-ae35-1e4c94ff51a4"}},"overrides":{"qs":">=6.14.2","flatted":">=3.4.2"},"repository":{"url":"git+https://github.com/starman69/mcp-sanitizer.git","type":"git"},"_npmVersion":"11.12.1","description":"Comprehensive security sanitization library for Model Context Protocol (MCP) servers with trusted security libraries","directories":{},"_nodeVersion":"20.20.2","dependencies":{"unorm":"^1.6.0","sqlstring":"^2.3.3","validator":"^13.15.22","escape-html":"^1.0.3","shell-quote":"^1.8.3","path-is-inside":"^1.0.2","sanitize-filename":"^1.6.3"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","snyk":"^1.1248.0","eslint":"^8.54.0","benchmark":"^2.1.4","supertest":"^6.3.3","eslint-config-standard":"^17.1.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp-sanitizer_1.3.2_1775109659177_0.541870098509275","host":"s3://npm-registry-packages-npm-production"}},"1.3.3":{"name":"mcp-sanitizer","version":"1.3.3","keywords":["mcp","security","sanitization","model-context-protocol","input-validation","command-injection","sql-injection","xss-prevention","escape-html","sqlstring","shell-quote","validator","express-middleware","fastify-plugin","koa-middleware","security-policies"],"author":{"name":"starman69"},"license":"MIT","_id":"mcp-sanitizer@1.3.3","maintainers":[{"name":"starman69","email":"dave@pattens.org"}],"homepage":"https://github.com/starman69/mcp-sanitizer#readme","bugs":{"url":"https://github.com/starman69/mcp-sanitizer/issues"},"dist":{"shasum":"50a6b3e6396b744caef69869939857b076702a76","tarball":"https://registry.npmjs.org/mcp-sanitizer/-/mcp-sanitizer-1.3.3.tgz","fileCount":35,"integrity":"sha512-kjCLLB8XJdMM4S8CpHxht3a1LlJF/x1oK2KDY66GY9IlmVL3dSaj76+bw1h0//MtXtFXvEkH/aZzsVNCHR1VVw==","signatures":[{"sig":"MEQCIBR1Dt+4iPZttaQ6sKKzXUArljxr2O1Y94MQEcYaqLWkAiB/U4HNyH1QD4xEwzN9r3WWmjmB0MvJtHRKckkaHfzORw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/mcp-sanitizer@1.3.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":505686},"main":"src/index.js","engines":{"node":">=20.0.0"},"gitHead":"caff5d62755e0c86b2e68bc083c73264d9138199","scripts":{"lint":"eslint src/ test/","test":"jest","test:watch":"jest --watch","test:coverage":"jest --coverage","security-audit":"npm audit && snyk test"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:26a9ff45-eb92-4fca-ae35-1e4c94ff51a4"}},"overrides":{"qs":">=6.15.2","flatted":">=3.4.2"},"repository":{"url":"git+https://github.com/starman69/mcp-sanitizer.git","type":"git"},"_npmVersion":"11.16.0","description":"Comprehensive security sanitization library for Model Context Protocol (MCP) servers with trusted security libraries","directories":{},"_nodeVersion":"20.20.2","dependencies":{"unorm":"^1.6.0","sqlstring":"^2.3.3","validator":"^13.15.22","escape-html":"^1.0.3","shell-quote":"^1.8.4","path-is-inside":"^1.0.2","sanitize-filename":"^1.6.3"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","snyk":"^1.1248.0","eslint":"^8.54.0","benchmark":"^2.1.4","supertest":"^6.3.3","eslint-config-standard":"^17.1.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp-sanitizer_1.3.3_1781147302925_0.25586861424210605","host":"s3://npm-registry-packages-npm-production"}},"1.4.0":{"name":"mcp-sanitizer","version":"1.4.0","keywords":["mcp","security","sanitization","model-context-protocol","input-validation","command-injection","sql-injection","xss-prevention","escape-html","sqlstring","shell-quote","validator","express-middleware","fastify-plugin","koa-middleware","security-policies"],"author":{"name":"starman69"},"license":"MIT","_id":"mcp-sanitizer@1.4.0","maintainers":[{"name":"starman69","email":"dave@pattens.org"}],"homepage":"https://github.com/starman69/mcp-sanitizer#readme","bugs":{"url":"https://github.com/starman69/mcp-sanitizer/issues"},"dist":{"shasum":"d656c88a61b13a93580f9358e3953cc33fbac7a4","tarball":"https://registry.npmjs.org/mcp-sanitizer/-/mcp-sanitizer-1.4.0.tgz","fileCount":35,"integrity":"sha512-QNua+DtszP43FZfqVTi/M67AV1GCDAE6pkwOHqeGvKFfTHJ8lQ0uDarXgY6ygqRM+UMdRGMdC+yWNAyILaxmNg==","signatures":[{"sig":"MEYCIQCV4iG7mUiB8sGrtWhlKo6Rr8lirMZah+R13VCmEAm1BgIhAOV5oEbI4LkSsaBWMVZsyymmqCFcj7vmWEeOYI9TYTg8","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/mcp-sanitizer@1.4.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":510572},"main":"src/index.js","engines":{"node":">=20.0.0"},"gitHead":"3157980b7da0342d49b327c1fcbdf0677b558097","scripts":{"lint":"eslint src/ test/","test":"jest","test:watch":"jest --watch","test:coverage":"jest --coverage","security-audit":"npm audit && snyk test"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:26a9ff45-eb92-4fca-ae35-1e4c94ff51a4"}},"overrides":{"qs":">=6.15.2","flatted":">=3.4.2","form-data":">=4.0.6"},"repository":{"url":"git+https://github.com/starman69/mcp-sanitizer.git","type":"git"},"_npmVersion":"11.17.0","description":"Comprehensive security sanitization library for Model Context Protocol (MCP) servers with trusted security libraries","directories":{},"_nodeVersion":"20.20.2","dependencies":{"unorm":"^1.6.0","sqlstring":"^2.3.3","validator":"^13.15.22","escape-html":"^1.0.3","shell-quote":"^1.8.4","path-is-inside":"^1.0.2","sanitize-filename":"^1.6.3"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","snyk":"^1.1248.0","eslint":"^8.54.0","benchmark":"^2.1.4","supertest":"^6.3.3","eslint-config-standard":"^17.1.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp-sanitizer_1.4.0_1782358905546_0.4015430719036741","host":"s3://npm-registry-packages-npm-production"}},"1.4.1":{"name":"mcp-sanitizer","version":"1.4.1","keywords":["mcp","security","sanitization","model-context-protocol","input-validation","command-injection","sql-injection","xss-prevention","escape-html","sqlstring","shell-quote","validator","express-middleware","fastify-plugin","koa-middleware","security-policies"],"author":{"name":"starman69"},"license":"MIT","_id":"mcp-sanitizer@1.4.1","maintainers":[{"name":"starman69","email":"dave@pattens.org"}],"homepage":"https://github.com/starman69/mcp-sanitizer#readme","bugs":{"url":"https://github.com/starman69/mcp-sanitizer/issues"},"dist":{"shasum":"5d2ceaf45098d60989c8da3c3066beb6e43846ad","tarball":"https://registry.npmjs.org/mcp-sanitizer/-/mcp-sanitizer-1.4.1.tgz","fileCount":35,"integrity":"sha512-vfnZxRNrJFSzVCN1WGg/sQpXkDASTzzKHdX+qkvbU/8RlN/3Wr7JnDprFy5xwA/zZs2nWY6+ptuE7ws92gs38w==","signatures":[{"sig":"MEYCIQDxwgbdxv4I7vOULscvQVWWjVB+c4A4giykO4c4U5SwTgIhALD85EjqrWilnQQzb+Wjap0ZiXC+DDplQ/DlFW5LfSVz","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEYCIQC2rH01PEXn3cfRuOpj599CM70xa1ywlqZx12i/gEUQ5gIhAKz7pdrTXRwopwPpDk6YQE7Hf3sJ15cKBOB8kt2KATnW","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/mcp-sanitizer@1.4.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":510730},"main":"src/index.js","engines":{"node":">=20.0.0"},"gitHead":"aeb5227c36a905453e6b502e6b417420d143d6ff","scripts":{"lint":"eslint src/ test/","test":"jest","test:watch":"jest --watch","test:coverage":"jest --coverage","security-audit":"npm audit && snyk test"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:26a9ff45-eb92-4fca-ae35-1e4c94ff51a4"}},"overrides":{"qs":">=6.15.2","flatted":">=3.4.2","js-yaml":"4.3.1","form-data":">=4.0.6","@babel/core":"^7.29.7","brace-expansion":"1.1.18","@istanbuljs/load-nyc-config":{"js-yaml":"3.15.1"}},"repository":{"url":"git+https://github.com/starman69/mcp-sanitizer.git","type":"git"},"_npmVersion":"11.19.1","description":"Comprehensive security sanitization library for Model Context Protocol (MCP) servers with trusted security libraries","directories":{},"_nodeVersion":"22.23.2","dependencies":{"unorm":"^1.6.0","sqlstring":"^2.3.3","validator":"^13.15.22","escape-html":"^1.0.3","shell-quote":"^1.10.0","path-is-inside":"^1.0.2","sanitize-filename":"^1.6.3"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","snyk":"^1.1248.0","eslint":"^8.54.0","benchmark":"^2.1.4","supertest":"^6.3.3","eslint-config-standard":"^17.1.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp-sanitizer_1.4.1_1788118071674_0.7914449981788534","host":"s3://npm-registry-packages-npm-production"}},"1.4.2":{"_id":"mcp-sanitizer@1.4.2","bugs":{"url":"https://github.com/starman69/mcp-sanitizer/issues"},"dist":{"shasum":"80d12ed413d0d8c03cc277a47ca2360e4de4e557","tarball":"https://registry.npmjs.org/mcp-sanitizer/-/mcp-sanitizer-1.4.2.tgz","fileCount":35,"integrity":"sha512-PQNqYs+lz5T3biFQZqY2eU3QVoQM+daVpYPTWqoNHmE3XDhnOCyl39GIoJD09FGyHrq8pRm8NqLEG9jaw+U6CQ==","signatures":[{"sig":"MEQCIA/X+Vdt6gRiSi3apVUQLMmdaZL9eCdAhVnSuNah4bObAiA4W5nYA0uzmNBEfC6J67Vs2kwzhl1T1180EfSoctE/Xw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIAPAeOAA5htC0LFo5efRo8ivsN9T9t2Gxz79zWzYBZp5AiEAmG47pY8nsSmRNpHZJ0ohFSMzFQ+nk5DPAyAsVV5CmAM="}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/mcp-sanitizer@1.4.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":518141},"main":"src/index.js","name":"mcp-sanitizer","author":{"name":"starman69"},"engines":{"node":">=20.0.0"},"gitHead":"c4550b345932873a42f3cfa8415e9df00b228e41","license":"MIT","scripts":{"lint":"eslint src/ test/","test":"jest","test:watch":"jest --watch","test:coverage":"jest --coverage","security-audit":"npm audit && snyk test"},"version":"1.4.2","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"26a9ff45-eb92-4fca-ae35-1e4c94ff51a4"}},"homepage":"https://github.com/starman69/mcp-sanitizer#readme","keywords":["mcp","security","sanitization","model-context-protocol","input-validation","command-injection","sql-injection","xss-prevention","escape-html","sqlstring","shell-quote","validator","express-middleware","fastify-plugin","koa-middleware","security-policies"],"overrides":{"qs":">=6.15.2","flatted":">=3.4.2","js-yaml":"4.3.2","form-data":">=4.0.6","@babel/core":"^7.29.7","brace-expansion":"1.1.21","@istanbuljs/load-nyc-config":{"js-yaml":"3.15.2"}},"repository":{"url":"git+https://github.com/starman69/mcp-sanitizer.git","type":"git"},"_npmVersion":"11.21.1","description":"Comprehensive security sanitization library for Model Context Protocol (MCP) servers with trusted security libraries","directories":{},"maintainers":[{"name":"starman69","email":"dave@pattens.org"}],"_nodeVersion":"22.23.4","dependencies":{"unorm":"^1.6.0","sqlstring":"^2.3.3","validator":"^13.15.22","escape-html":"^1.0.3","shell-quote":"^1.12.0","path-is-inside":"^1.0.2","sanitize-filename":"^1.6.3"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","snyk":"^1.1248.0","eslint":"^8.54.0","benchmark":"^2.1.4","supertest":"^6.3.3","eslint-config-standard":"^17.1.0"},"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/mcp-sanitizer_1.4.2_1793441715680_0.5623129325609123"}}},"time":{"created":"2025-08-05T19:14:36.255Z","modified":"2026-10-31T10:15:16.064Z","1.0.0":"2025-08-05T19:14:36.429Z","1.1.0":"2025-08-23T15:03:08.099Z","1.2.0":"2025-08-24T07:53:06.770Z","1.3.0":"2026-02-10T05:11:02.586Z","1.3.1":"2026-03-01T01:33:15.128Z","1.3.2":"2026-04-02T06:00:59.324Z","1.3.3":"2026-06-11T03:08:23.058Z","1.4.0":"2026-06-25T03:41:45.724Z","1.4.1":"2026-08-30T19:27:51.784Z","1.4.2":"2026-10-31T10:15:15.774Z"},"bugs":{"url":"https://github.com/starman69/mcp-sanitizer/issues"},"author":{"name":"starman69"},"license":"MIT","homepage":"https://github.com/starman69/mcp-sanitizer#readme","keywords":["mcp","security","sanitization","model-context-protocol","input-validation","command-injection","sql-injection","xss-prevention","escape-html","sqlstring","shell-quote","validator","express-middleware","fastify-plugin","koa-middleware","security-policies"],"repository":{"url":"git+https://github.com/starman69/mcp-sanitizer.git","type":"git"},"description":"Comprehensive security sanitization library for Model Context Protocol (MCP) servers with trusted security libraries","maintainers":[{"name":"starman69","email":"dave@pattens.org"}],"readme":"# MCP Sanitizer\n\nA comprehensive security sanitization library for Model Context Protocol (MCP) servers, designed to prevent common attack vectors including command injection, SQL injection, directory traversal, prototype pollution, and code execution attempts.\n\n[![npm version](https://badge.fury.io/js/mcp-sanitizer.svg)](https://badge.fury.io/js/mcp-sanitizer)\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)\n[![Security Tests](https://img.shields.io/badge/Security%20Tests-1140%2B-brightgreen)](./test)\n\n## 🔒 Security Features\n\nMCP Sanitizer provides comprehensive, defense-in-depth protection:\n\n- ✅ **Multi-layered Protection**: Command injection, SQL injection, XSS, NoSQL injection, path traversal\n- ✅ **Advanced Unicode Defense**: Homograph detection, multi-pass normalization, zero-width removal\n- ✅ **Context-aware Validation**: Specialized rules for file paths, URLs, commands, and SQL queries\n- ✅ **Database-specific SQL Protection**: PostgreSQL, MySQL, MSSQL, Oracle validation and escaping\n- ✅ **Framework Integration**: Express, Fastify, and Koa middleware with `skipPaths` support\n- ✅ **Security Policies**: Pre-configured policies (STRICT, MODERATE, PERMISSIVE, DEVELOPMENT, PRODUCTION)\n- ✅ **Comprehensive Validation**: Checking 42+ attack vectors across 12 validation layers in <1ms\n- ✅ **Comprehensive Testing**: 1140 tests with 93% code coverage, sub-millisecond performance\n\n### Security Philosophy\nWhile we maintain rigorous security standards and comprehensive test coverage, we acknowledge that:\n- No security solution is 100% bulletproof against unknown threats\n- Zero-day vulnerabilities may emerge in the future\n- Defense-in-depth is essential (use multiple security layers)\n- Regular updates are crucial for evolving threat landscape\n\nWe encourage responsible disclosure of any security issues via GitHub Security Advisories.\n\n## Installation\n\n```bash\nnpm install mcp-sanitizer\n```\n\n## Quick Start\n\n```javascript\nconst MCPSanitizer = require('mcp-sanitizer');\n\n// Use default configuration\nconst sanitizer = new MCPSanitizer();\n\n// Or use a security policy\nconst strictSanitizer = new MCPSanitizer('STRICT');\n\n// Sanitize MCP tool call\nconst toolCall = {\n  name: \"file_reader\",\n  parameters: {\n    file_path: \"../../../etc/passwd\"  // Malicious input\n  }\n};\n\nconst result = sanitizer.sanitize(toolCall);\nif (result.blocked) {\n  console.log('Attack blocked:', result.warnings);\n} else {\n  console.log('Safe input:', result.sanitized);\n}\n```\n\n## Security Policies\n\nThe MCP Sanitizer includes five pre-configured security policies:\n\n| Policy | Use Case | String Limit | Protocols | Blocking Level |\n|--------|----------|--------------|-----------|----------------|\n| **STRICT** | High-security, untrusted input | 1,000 chars | HTTPS only | Medium+ |\n| **MODERATE** | Balanced production security | 5,000 chars | HTTP, HTTPS, MCP | High+ |\n| **PERMISSIVE** | Trusted environments | 50,000 chars | HTTP, HTTPS, FTP, MCP, File | Critical only |\n| **DEVELOPMENT** | Development with debugging | 20,000 chars | HTTP, HTTPS, MCP, File | High+ |\n| **PRODUCTION** | Production environments | 8,000 chars | HTTPS, MCP | High+ |\n\n```javascript\n// Use a security policy\nconst sanitizer = new MCPSanitizer('PRODUCTION');\n\n// Use policy with customizations\nconst customSanitizer = new MCPSanitizer({\n  policy: 'MODERATE',\n  maxStringLength: 15000,\n  allowedProtocols: ['https', 'mcp'],\n  blockOnSeverity: 'medium'  // Block medium severity and above\n});\n```\n## Framework Middleware\n\n### Express.js\n\n```javascript\nconst express = require('express');\nconst { createExpressMiddleware } = require('mcp-sanitizer/middleware/express');\n\nconst app = express();\napp.use(express.json());\n\n// Apply middleware with defaults\napp.use(createExpressMiddleware());\n\n// Or specify configuration\napp.use(createExpressMiddleware({\n  policy: 'PRODUCTION',\n  mode: 'sanitize', // or 'block'\n  skipPaths: ['/health', '/metrics']  // Skip sanitization for these paths\n}));\n\napp.post('/tools/:toolName/execute', (req, res) => {\n  // req.body is now sanitized\n  // req.sanitizationWarnings contains any warnings\n});\n```\n\n### Fastify\n\n```javascript\nconst fastify = require('fastify')();\nconst mcpSanitizerPlugin = require('mcp-sanitizer/middleware/fastify');\n\n// Register as plugin\nfastify.register(mcpSanitizerPlugin, {\n  policy: 'MODERATE'\n});\n```\n\n### Koa\n\n```javascript\nconst Koa = require('koa');\nconst { createKoaMiddleware } = require('mcp-sanitizer/middleware/koa');\n\nconst app = new Koa();\napp.use(createKoaMiddleware({\n  policy: 'STRICT'\n}));\n```\n\n## Configuration Options\n\n### Using Configuration Builder (Fluent API)\n\n```javascript\nconst { createConfigBuilder } = require('mcp-sanitizer');\n\nconst config = createConfigBuilder()\n  .usePolicy('MODERATE')\n  .maxStringLength(20000)\n  .allowProtocols(['https', 'mcp'])\n  .allowFileExtensions(['.txt', '.json', '.md', '.csv'])\n  .blockOnSeverity('high')\n  .strictMode(true)\n  .patternDetection({\n    enableCommandInjection: true,\n    enableSQLInjection: true,\n    enablePrototypePollution: true,\n    enableTemplateInjection: false\n  })\n  .build();\n\nconst sanitizer = new MCPSanitizer(config);\n```\n\n### Direct Configuration\n\n```javascript\nconst sanitizer = new MCPSanitizer({\n  // Limits\n  maxStringLength: 10000,\n  maxDepth: 10,\n  maxArrayLength: 1000,\n  maxObjectKeys: 100,\n  \n  // Security\n  allowedProtocols: ['https', 'mcp'],\n  allowedFileExtensions: ['.txt', '.json', '.md'],\n  blockOnSeverity: 'high',\n  strictMode: false,\n  \n  // Patterns\n  blockedPatterns: [\n    /\\$\\{.*?\\}/g,     // Template injection\n    /__proto__/gi,    // Prototype pollution\n    /require\\s*\\(/gi  // Code execution\n  ],\n  \n  // Context-specific settings\n  contextSettings: {\n    url: {\n      allowPrivateIPs: false,\n      blockedDomains: ['tracker.example'], // Domain and its subdomains\n      allowedDomains: []                    // Non-empty = only these domains\n    },\n    filePath: {\n      allowAbsolutePaths: false,\n      allowedDirectories: ['./data']\n    }\n  }\n});\n```\n\n## Supported Attack Vectors\n\n- **Directory Traversal** - Relative path escapes, absolute system paths, UNC paths\n- **Command Injection** - Shell metacharacters, chained commands, pipe redirection\n- **SQL Injection** - Union-based, boolean-based, time-based, stacked queries, comment injection\n- **Prototype Pollution** - Proto/constructor manipulation, deep property injection\n- **Template Injection** - Server-side template engines, JNDI lookups, expression languages\n- **Code Execution** - Dynamic evaluation, module loading, function constructors\n\n## API Reference\n\n### `new MCPSanitizer(options?)`\n\nCreate a new sanitizer instance.\n\n**Parameters:**\n- `options`: Configuration object, security policy name, or policy with customizations\n\n### `sanitizer.sanitize(input, context?)`\n\nSanitizes input data and returns a result object.\n\n**Parameters:**\n- `input`: The data to sanitize (any type)\n- `context`: Optional context object with `type` field\n\n**Returns:**\n```javascript\n{\n  sanitized: any,     // Sanitized data (null if blocked)\n  warnings: string[], // Array of warning messages\n  blocked: boolean    // True if input was blocked\n}\n```\n\n**Context Types:**\n- `file_path`: Apply file path validation\n- `url`: Apply URL validation  \n- `command`: Apply command validation\n- `sql`: Apply SQL query validation\n\n### Specialized Methods\n\n```javascript\n// Sanitize specific input types\nsanitizer.sanitizeFilePath('/path/to/file');\nsanitizer.sanitizeURL('https://example.com');\nsanitizer.sanitizeCommand('ls -la');\nsanitizer.sanitizeSQL('SELECT * FROM users WHERE id = ?');\n```\n\n### Configuration Methods\n\n```javascript\n// Get configuration summary\nconst summary = sanitizer.getConfigSummary();\n\n// Update configuration at runtime\nsanitizer.updateConfig({\n  maxStringLength: 25000\n});\n\n// Apply new security policy\nsanitizer.applyPolicy('STRICT', {\n  maxStringLength: 5000 // Override\n});\n\n// Check environment compatibility\nconst compatibility = sanitizer.checkEnvironmentCompatibility('production');\n```\n\n## Security Libraries Used\n\nThe MCP Sanitizer leverages trusted, industry-standard security libraries:\n\n- **[escape-html](https://github.com/component/escape-html)** - HTML entity encoding (3-4x faster than regex)\n- **[sqlstring](https://github.com/mysqljs/sqlstring)** - MySQL-compatible SQL escaping\n- **[shell-quote](https://github.com/substack/node-shell-quote)** - Shell command escaping\n- **[validator](https://github.com/validatorjs/validator.js)** - String validation and sanitization\n- **[sanitize-filename](https://github.com/parshap/node-sanitize-filename)** - Filename sanitization\n- **[path-is-inside](https://github.com/domenic/path-is-inside)** - Path containment checking\n- **[unorm](https://github.com/walling/unorm)** - Unicode normalization (NFC, NFD, NFKC, NFKD)\n\n## Testing\n\n```bash\n# Run tests\nnpm test\n\n# Run with coverage\nnpm run test:coverage\n\n# Watch mode\nnpm run test:watch\n\n# Security audit\nnpm run security-audit\n```\n\n## Performance\n\n- **Sub-millisecond Validation**: <1ms average latency for complete validation (12 layers checking 40+ attack vectors)\n- **High Throughput**: 7,500+ operations/second average, scales linearly with CPU cores\n- **Industry-Leading Libraries**: escape-html (31M ops/sec), sqlstring (44M ops/sec), shell-quote (2.5M ops/sec)\n- **Production Ready**: Sub-millisecond response times enable real-time validation without user-perceivable delays\n- **Memory Efficient**: Configurable limits prevent exhaustion (<100MB under attack, typical usage <60MB)\n- **Zero Overhead**: No artificial delays, pure validation logic only\n- **Scalable**: Stateless design allows horizontal scaling across multiple cores/instances\n\n### Performance Metrics\n\n| Metric | Value | Details |\n|--------|-------|---------|\n| **Average Latency** | <1ms | 0.447ms - 0.84ms depending on input complexity |\n| **Throughput** | 7,500+ ops/sec | Per CPU core, scales linearly |\n| **Attack Detection** | 0.28ms - 2.39ms | All 42 attack vectors blocked |\n| **Memory Usage** | <60MB typical | <100MB maximum under stress |\n| **CPU Efficiency** | Optimized | No busy-wait loops, pure validation |\n\n**Validation Layers**: Command injection, SQL injection (4 databases), NoSQL injection, XSS, path traversal, prototype pollution, template injection, Unicode normalization (4 passes), multi-layer encoding detection, file extension validation, protocol validation\n\n**Optimization Options**: Use `skipPaths` middleware to exempt low-risk routes (health checks, static assets, metrics endpoints)\n\n## Examples\n\n### Environment-based Configuration\n\n```javascript\nconst { createRecommendedConfig } = require('mcp-sanitizer');\n\n// Get recommended configuration for your environment\nconst { config, metadata } = createRecommendedConfig('production', 'low');\nconsole.log(metadata.rationale); // Why this policy was recommended\n\nconst sanitizer = new MCPSanitizer(config);\n```\n\n### Custom Security Patterns\n\n```javascript\nconst sanitizer = new MCPSanitizer({\n  blockedPatterns: [\n    // Default patterns plus custom ones\n    /bitcoin|cryptocurrency/i,  // Block crypto content\n    /\\b\\d{16}\\b/,              // Block credit card numbers\n    /password|secret|token/i    // Block sensitive keywords\n  ],\n  sqlKeywords: [\n    // Add custom SQL keywords\n    'MERGE', 'UPSERT', 'BULK'\n  ]\n});\n```\n\n### MCP Tool Parameter Validation\n\n```javascript\n// Before executing file operations\nconst pathResult = sanitizer.sanitize(params.file_path, { type: 'file_path' });\nif (pathResult.blocked) {\n  throw new Error('Invalid file path');\n}\n\n// Before making HTTP requests\nconst urlResult = sanitizer.sanitize(params.url, { type: 'url' });\nif (urlResult.blocked) {\n  throw new Error('Invalid or restricted URL');\n}\n```\n\n`sanitize()` checks the URL string only: it blocks private/loopback/link-local IP\nliterals and internal-only names (`*.internal`, `*.local`, ...), but cannot know\nthat a public name such as `10.0.0.5.nip.io` resolves to a private address. Before\nfetching, resolve and pin with `resolveAndValidateURL`:\n\n```javascript\nconst http = require('http');\nconst { resolveAndValidateURL } = require('mcp-sanitizer');\n\n// Rejects if the hostname resolves to any restricted address\nconst { url, address, family } = await resolveAndValidateURL(params.url);\n\n// Connect to the checked address so a DNS change cannot redirect the request\nconst lookup = (host, opts, cb) =>\n  opts.all ? cb(null, [{ address, family }]) : cb(null, address, family);\nhttp.get(url, { lookup });\n```\n\n## Contributing\n\n1. Fork the repository\n2. Create a feature branch (`git checkout -b feature/amazing-feature`)\n3. Write tests for new functionality\n4. Ensure all tests pass (`npm test`)\n5. Lint your code (`npm run lint`)\n6. Commit your changes (`git commit -m 'Add amazing feature'`)\n7. Push to the branch (`git push origin feature/amazing-feature`)\n8. Open a Pull Request\n\n## Security\n\n### 🛡️ Run Security Benchmarks\n\nRun comprehensive security benchmarks to validate protection:\n\n```bash\n# Quick demo (10 attack vectors + performance test)\nnode benchmark/quick-demo.js\n\n# Comprehensive security benchmark (42 attack vectors)\nnode benchmark/advanced-security-benchmark.js\n\n# Performance benchmarks\nnode benchmark/library-performance.js\nnode benchmark/skip-paths-performance.js\n```\n\n**Expected Results:**\n- All 42 attack vectors blocked (100%)\n- Average latency: <1ms\n- Throughput: 7,500+ ops/sec\n- Memory usage: <60MB\n\n### 🔒 Security Testing Coverage\n\n| Category | Coverage |\n|----------|----------|\n| **XSS Vectors** | DOM-based, attribute injection, polyglots |\n| **SQL Injection** | All major databases, blind/time-based, bypass techniques |\n| **Command Injection** | Shell metacharacters, environment vars, process substitution |\n| **Path Traversal** | Directory traversal, absolute paths, UNC |\n| **ReDoS Protection** | Polynomial backtracking, timeout guards |\n| **Prototype Pollution** | `__proto__`, constructor, prototype, encoding bypass |\n| **Memory Safety** | Bounded memory usage under attack |\n\n### 🎯 Security Best Practices\n\n1. ✅ **Use STRICT or PRODUCTION policy** for untrusted input\n2. ✅ **Update regularly** for latest security patches\n3. ✅ **Monitor blocked attempts** in production for security insights\n4. ✅ **Implement defense-in-depth** - multiple security layers\n5. ✅ **Test with your attack vectors** using provided benchmarks\n6. ✅ **Enable rate limiting** at infrastructure layer\n\n### 📝 Security Resources\n\n- [Security Documentation](./docs/SECURITY.md) - Comprehensive security information\n- [Benchmark Documentation](./benchmark/README.md) - Performance and security testing\n- [CodeQL Results](https://github.com/starman69/mcp-sanitizer/security/code-scanning) - Zero findings\n- [Release Notes](https://github.com/starman69/mcp-sanitizer/releases) - Security improvements per version\n\n## Security Reporting\n\nIf you discover a security vulnerability, please email me instead of using the public issue tracker. We follow responsible disclosure practices and will credit researchers.\n\n## License\n\nMIT License - see [LICENSE](LICENSE) file for details.\n\n## Related Projects\n\n- [Model Context Protocol](https://github.com/anthropics/model-context-protocol)\n- [OWASP Input Validation](https://owasp.org/www-project-proactive-controls/v3/en/c5-validate-inputs)\n- [Express Security Best Practices](https://expressjs.com/en/advanced/best-practice-security.html)\n\n---\n\nBuilt with ❤️ for the MCP community. Secured with industry-standard libraries.","readmeFilename":"README.md"}