@@ -412,7 +412,7 @@ mod tests {
412412 // Normal names stay the same
413413 assert_eq ! ( sanitize_server_name( "my-server" ) , "my-server" ) ;
414414 assert_eq ! ( sanitize_server_name( "server_123" ) , "server_123" ) ;
415-
415+
416416 // Path traversal attempts get sanitized
417417 assert_eq ! ( sanitize_server_name( "../../../etc" ) , "________etc" ) ;
418418 assert_eq ! ( sanitize_server_name( "test/subdir" ) , "test_subdir" ) ;
@@ -425,7 +425,7 @@ mod tests {
425425 assert ! ( validate_server_name( "my-server" ) ) ;
426426 assert ! ( validate_server_name( "server_123" ) ) ;
427427 assert ! ( validate_server_name( "ABC" ) ) ;
428-
428+
429429 // Invalid names
430430 assert ! ( !validate_server_name( "../../../etc" ) ) ;
431431 assert ! ( !validate_server_name( "test/subdir" ) ) ;
@@ -437,11 +437,11 @@ mod tests {
437437 fn test_server_path_traversal ( ) {
438438 let ( storage, tmp) = test_storage ( ) ;
439439 let base_dir = tmp. path ( ) . to_path_buf ( ) ;
440-
440+
441441 // Attempt path traversal
442442 let malicious_name = "../../../etc/passwd" ;
443443 let result_path = storage. server_path ( malicious_name) ;
444-
444+
445445 // The result should still be under mcps_dir
446446 assert ! ( result_path. starts_with( base_dir. join( "mcps" ) ) ) ;
447447 assert ! ( !result_path. to_string_lossy( ) . contains( ".." ) ) ;
0 commit comments