Hacker News Reader

Wh... wh... what? The problem is that ANSI escape codes aren't being stripped from text before processing, and you think a HUMAN should be doing that? That'd be like having a secretary hand-check every SQL query as it arrives at the database instead of using a query builder...

View on HN

A human should defintely be doing that.

By "that" it is understood: enforcing that the code cleans up unsafe inputs before processing them.

If there is no human doing that enforcement, the code has no chance of being secure.

Why! Do you use your eyeballs to spot SQL injection? Or do you maybe use a tool? A linter perhaps?

I develop my code defensively, and I argue that the developers of MCP servers need to develop their code defensively too.

Not sure what it is that you intend to argue.

Reply on news.ycombinator.com