Search MCP Server

'use strict' const { test } = require('node:test') const build = require('..') const stringify = build({ title: 'Example Schema', type: 'object', properties: { firstName: { type: 'string' }, lastName: { type: 'string' }, age: { description: 'Age in years"', type: 'integer' }, [(() => "phra'&& process.exit(1) ||'phra")()]: {}, now: { type: 'string' }, reg: { type: 'string', default: 'a\'&& process.exit(1) ||\'' }, obj: { type: 'object', properties: { bool: { type: 'boolean' } } }, '"\'w00t': { type: 'string', default: '"\'w00t' }, arr: { type: 'array', items: { type: 'object', properties: { 'phra\' && process.exit(1)//': { type: 'number' }, str: { type: 'string' } } } } }, required: ['now'], patternProperties: { '.*foo$': { type: 'string' }, test: { type: 'number' }, 'phra\'/ && process.exit(1) && /\'': { type: 'number' }, '"\'w00t.*////': { type: 'number' } }, additionalProperties: { type: 'string' } }) const obj = { firstName: 'Matteo', lastName: 'Collina', age: 32, now: new Date(), foo: 'hello"', bar: "world'", 'fuzz"': 42, "me'": 42, numfoo: 42, test: 42, strtest: '23', arr: [{ 'phra\' && process.exit(1)//': 42 }], obj: { bool: true }, notmatch: 'valar morghulis', notmatchobj: { a: true }, notmatchnum: 42 } test('sanitize', t => { const json = stringify(obj) t.assert.doesNotThrow(() => JSON.parse(json)) const stringify2 = build({ title: 'Example Schema', type: 'object', patternProperties: { '"\'w00t.*////': { type: 'number' } } }) t.assert.deepStrictEqual(JSON.parse(stringify2({ '"\'phra////': 42, asd: 42 })), { }) const stringify3 = build({ title: 'Example Schema', type: 'object', properties: { "\"phra\\'&&(console.log(42))//||'phra": {} } }) // this verifies the escaping JSON.parse(stringify3({ '"phra\'&&(console.log(42))//||\'phra': 42 })) const stringify4 = build({ title: 'Example Schema', type: 'object', properties: { '"\\\\\\\\\'w00t': { type: 'string', default: '"\'w00t' } } }) t.assert.deepStrictEqual(JSON.parse(stringify4({})), { '"\\\\\\\\\'w00t': '"\'w00t' }) })