brightspace-mcp-server 3.8.13 → 3.8.14

package/README.md

@@ -151,5 +151,6 @@ Run it from your home folder — macOS blocks `npx` from Documents, Desktop, or
 
 When a content-file download returns 403 or 404, `download_file` checks topic metadata and the course table of contents. Confirmed restrictions return `{ success: false, available: false, reason, message, startDate, endDate }` so the assistant can explain when content opens or why it has closed. Unexplained 404s and server/network failures retain their original errors.
 
+When course content or announcements are converted to markdown, `javascript:`/`data:` links are rendered as plain text (the link itself is dropped, not followed) and D2L's per-session query parameters (`d2lSessionVal`, `d2lSecureSessionVal`, and the cache-busting `_`) are stripped from any remaining links and images before they reach the assistant.
 
 Licensed under the MIT License.

package/build/api/paginate.js

@@ -78,16 +78,47 @@ export async function fetchAllObjects(apiClient, firstPath, options) {
     }
     return objects;
 }
-/** A Next value resolved to a request path. */
+/**
+ * A Next value resolved to a request path, or null when it should not be
+ * followed.
+ *
+ * Adapted from JhostinAleck/brightspace-mcp (MIT): beyond dropping an
+ * absolute Next's host (the client always prefixes its own configured base
+ * URL, so a hostile/garbled Next cannot redirect requests elsewhere), anything
+ * -- absolute or server-relative -- whose path falls outside `/d2l/api/` is
+ * rejected rather than followed, since that is the only space these paginated
+ * endpoints legitimately point back into.
+ */
 function nextPath(firstPath, next) {
     if (/^https?:\/\//i.test(next)) {
         const url = new URL(next);
+        if (!isApiPath(url.pathname)) {
+            log("INFO", "Pagination stopped: Next link left the D2L API", {
+                firstPath,
+                nextPath: url.pathname,
+            });
+            return null;
+        }
         return `${url.pathname}${url.search}`;
     }
     // A Next that begins with a slash is already a path, not a bookmark.
     // Appending it as one would ask for a page that does not exist.
     if (next.startsWith("/")) {
+        const nextPathOnly = next.split("?")[0] ?? next;
+        if (!isApiPath(nextPathOnly)) {
+            log("INFO", "Pagination stopped: Next link left the D2L API", {
+                firstPath,
+                // Log only the path, not the query string: a rejected server-relative
+                // Next can carry a `d2lSessionVal=` token in its query.
+                nextPath: nextPathOnly,
+            });
+            return null;
+        }
         return next;
     }
     return withBookmark(firstPath, next);
 }
+/** Whether a Next path stays inside the D2L API namespace these endpoints page through. */
+function isApiPath(pathname) {
+    return pathname.startsWith("/d2l/api/");
+}

package/build/utils/html-converter.js

@@ -60,9 +60,70 @@ function getTurndownService() {
                 return body ? `\n\n${body}\n\n` : "";
             },
         });
+        // D2L appends per-session query params (d2lSessionVal, d2lSecureSessionVal,
+        // a `_` cache-buster) to in-content hrefs. Left alone, the markdown we hand
+        // the model echoes a live session token into the chat transcript. These
+        // two rules are unshifted ahead of Turndown's built-in link/image rules
+        // (addRule always inserts at the front of the rule list), so they run
+        // first and the defaults never see the raw attribute.
+        turndownService.addRule("linkSessionTokens", {
+            filter: (node) => node.nodeName === "A" && !!node.getAttribute("href"),
+            replacement: (content, node) => {
+                const href = node.getAttribute("href") ?? "";
+                // javascript:/data: hrefs aren't content links; drop the link but
+                // keep whatever text was inside it.
+                if (isUnsafeHref(href))
+                    return content;
+                const cleaned = stripSessionParams(href).replace(/([()])/g, "\\$1");
+                const title = node.getAttribute("title");
+                const titlePart = title ? ` "${title.replace(/"/g, '\\"')}"` : "";
+                return `[${content}](${cleaned}${titlePart})`;
+            },
+        });
+        turndownService.addRule("imageSessionTokens", {
+            filter: "img",
+            replacement: (_content, node) => {
+                const el = node;
+                const alt = el.getAttribute("alt") ?? "";
+                const src = stripSessionParams(el.getAttribute("src") ?? "");
+                const title = el.getAttribute("title");
+                const titlePart = title ? ` "${title}"` : "";
+                return src ? `![${alt}](${src}${titlePart})` : "";
+            },
+        });
     }
     return turndownService;
 }
+const SESSION_QUERY_PARAMS = new Set(["d2lsessionval", "d2lsecuresessionval", "_"]);
+/**
+ * Strip D2L's per-session query params (`d2lSessionVal`, `d2lSecureSessionVal`,
+ * and the `_` cache-buster) from a URL. Everything else about the URL --
+ * scheme, path, other params -- is left untouched, including a relative href,
+ * which is returned as-is apart from this filtering.
+ */
+function stripSessionParams(url) {
+    const queryStart = url.indexOf("?");
+    if (queryStart < 0)
+        return url;
+    const earlyHash = url.indexOf("#");
+    if (earlyHash >= 0 && earlyHash < queryStart) {
+        // The "?" falls inside the fragment (e.g. "#frag?x=1"), not a real query
+        // string -- nothing to strip, and treating it as one would mangle the
+        // fragment.
+        return url;
+    }
+    const hashStart = url.indexOf("#", queryStart);
+    const query = url.slice(queryStart + 1, hashStart < 0 ? undefined : hashStart);
+    const hash = hashStart < 0 ? "" : url.slice(hashStart);
+    const kept = query
+        .split("&")
+        .filter((param) => param !== "" && !SESSION_QUERY_PARAMS.has(param.split("=")[0].toLowerCase()));
+    return url.slice(0, queryStart) + (kept.length > 0 ? `?${kept.join("&")}` : "") + hash;
+}
+/** True for `javascript:`/`data:` hrefs -- never a legitimate content link. */
+function isUnsafeHref(href) {
+    return /^\s*(javascript|data):/i.test(href);
+}
 /** A cell's text, flattened so one table cell stays one table cell. */
 function cellText(content) {
     return content

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brightspace-mcp-server",
-  "version": "3.8.13",
+  "version": "3.8.14",
   "mcpName": "io.github.rohanmuppa/brightspace",
   "description": "MCP server for Brightspace (D2L). Check grades, due dates, assignments, announcements, syllabus, rosters and more via Claude, ChatGPT, Cursor, Windsurf, or any MCP client.",
   "type": "module",