Skip to content

Add a new tool update_column_colors#3

Open
urjeetpatel wants to merge 16 commits into
bethmaloney:mainfrom
urjeetpatel:main
Open

Add a new tool update_column_colors#3
urjeetpatel wants to merge 16 commits into
bethmaloney:mainfrom
urjeetpatel:main

Conversation

@urjeetpatel
Copy link
Copy Markdown

Add a new tool update_column_colors.

this was added to fix #2

Copilot AI and others added 13 commits March 18, 2026 16:49
…DL column cells

Co-authored-by: urjeetpatel <1077440+urjeetpatel@users.noreply.github.com>
…rs-tool

Add `update_column_colors` tool for RDL column text and background colors
Add update_column_colors to modify reports section
- Added find_packages() to setup.py to ensure all packages are
  included in the distribution.
…losure, ReDoS

- Replace unsafe xml.etree.ElementTree.parse() with defusedxml (CWE-611, CWE-776)
- Add filepath validation to prevent path traversal attacks (CWE-22)
- Sanitize error messages to prevent information disclosure (CWE-209)
- Add regex pattern length limit to prevent ReDoS attacks (CWE-1333)
- Add defusedxml>=0.7.1 as project dependency
- Add 12 security tests covering XXE, path traversal, info disclosure, ReDoS

Co-authored-by: urjeetpatel <1077440+urjeetpatel@users.noreply.github.com>
Agent-Logs-Url: https://github.com/urjeetpatel/rdl-mcp/sessions/447b3529-a1b4-4b3f-a600-4df5fe62f786
…test.fail()

Co-authored-by: urjeetpatel <1077440+urjeetpatel@users.noreply.github.com>
Agent-Logs-Url: https://github.com/urjeetpatel/rdl-mcp/sessions/447b3529-a1b4-4b3f-a600-4df5fe62f786
Replace hand-rolled JSON-RPC MCP protocol with fastmcp
…p migration

- pyproject.toml: combine both defusedxml and fastmcp dependencies
- rdl_mcp/server.py: accept fastmcp refactor, drop old hand-rolled protocol
- tests/test_rdl_mcp_server.py: keep security tests (XXE, path traversal, ReDoS)
  and fastmcp tests; drop info-disclosure tests (old handle_request removed)
- setup.py: add fastmcp alongside defusedxml in install_requires
…y-vulnerability

Harden XML parsing and input validation against XXE, path traversal, info disclosure, and ReDoS
@urjeetpatel
Copy link
Copy Markdown
Author

now fixes #1 as well

Copilot AI and others added 3 commits April 8, 2026 16:58
…yout/style APIs

Agent-Logs-Url: https://github.com/urjeetpatel/rdl-mcp/sessions/f7c4a2df-3782-4a3a-9fd9-759a26d14bec

Co-authored-by: urjeetpatel <1077440+urjeetpatel@users.noreply.github.com>
…ty-and-usability

RDL MCP Hardening: Safe Batch Editing, Concurrency Control, and Verifiable Layout/Style Updates
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Enhancement: Allow update_column_format to Change Colors

2 participants