Skip to content

v1.0.2

Latest
Latest

Choose a tag to compare

View all tags
@chrisfromthelc chrisfromthelc released this 11 Mar 05:53
v1.0.2
f07da05

Fixes a false positive in the shell metacharacter defense that rejected legitimate HTML/JSON content in WP-CLI argument values (e.g., --post_content=<h2>Hello</h2>).

What changed

  • Removed overly strict shell metacharacter check from validateArgs() — argument values passed via spawn() are array elements with no shell interpretation, so <, >, {, } etc. are safe
  • The metacharacter check remains on the command string in isCommandAllowed() where it's appropriate
  • Updated tests to confirm HTML, JSON, and special characters are allowed in arg values

Install / upgrade

npx -y @chrisfromthelc/local-wp-mcp@1.0.2 --setup
Assets 2
Loading