mcp-sanitizer 1.1.0 → 1.2.0

package/.eslintrc.js

@@ -13,6 +13,7 @@ module.exports = {
     sourceType: 'module'
   },
   rules: {
+    'semi': ['error', 'always'],
     'no-console': 'warn',
     'no-eval': 'error',
     'no-implied-eval': 'error',

package/README.md

@@ -4,33 +4,41 @@ A comprehensive security sanitization library for Model Context Protocol (MCP) s
 
 [![npm version](https://badge.fury.io/js/mcp-sanitizer.svg)](https://badge.fury.io/js/mcp-sanitizer)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Security Coverage](https://img.shields.io/badge/Security%20Coverage-100%25-brightgreen)](./benchmark/README.md)
-[![Attack Vectors Blocked](https://img.shields.io/badge/Attack%20Vectors%20Blocked-42%2F42-brightgreen)](./benchmark/advanced-security-benchmark.js)
+[![Test Coverage](https://img.shields.io/badge/Test%20Coverage-Comprehensive-brightgreen)](./test)
+[![Security Tests](https://img.shields.io/badge/Security%20Tests-500%2B-brightgreen)](./test)
 
-## 🔒 Security Posture
+## 🔒 Security Features
 
-**Version 1.1.0** - Production Ready with 100% attack vector coverage
+MCP Sanitizer provides comprehensive, defense-in-depth protection against common attack vectors:
 
-- ✅ **100% XSS Protection** - All 13 vectors blocked
-- ✅ **100% SQL Injection Protection** - All 10 vectors blocked  
-- ✅ **100% Command Injection Protection** - All 10 vectors blocked
-- ✅ **100% Path Traversal Protection** - All 9 vectors blocked
-- ✅ **Timing Attack Resistant** - <2% variance (prevents side-channel attacks)
-- ✅ **Unicode/Encoding Defense** - Handles `\uXXXX`, URL encoding, HTML entities
-- ✅ **Memory Safe** - Bounded at <100MB under attack
+- ✅ **Multi-layered validation** for command injection, SQL injection, and XSS
+- ✅ **Advanced Unicode normalization** to prevent homograph attacks
+- ✅ **Context-aware sanitization** for different input types
+- ✅ **NoSQL injection protection** for MongoDB and similar databases
+- ✅ **Path traversal prevention** with robust normalization
+- ✅ **Database-specific SQL protection** for PostgreSQL, MySQL, MSSQL, Oracle
+- ✅ **Comprehensive test coverage** with 500+ security tests
+
+### Security Philosophy
+
+While we maintain rigorous security standards and comprehensive test coverage, we acknowledge that:
+- No security solution is 100% bulletproof
+- Zero-day vulnerabilities may exist
+- Defense-in-depth is essential
+- Regular updates are crucial
+
+We encourage responsible disclosure of any security issues via GitHub Security Advisories.
 
 ## Features
 
-- **Multi-layered Protection**: Guards against command injection, SQL injection, XSS, prototype pollution, and template injection
-- **Advanced Decoding Layer**: Pre-processes Unicode, URL encoding, and control characters before validation
-- **Context-aware Sanitization**: Different validation rules for file paths, URLs, commands, and SQL queries
-- **Trusted Security Libraries**: Built on industry-standard libraries like `escape-html`, `sqlstring`, `shell-quote`, `validator`, `sanitize-filename`, and `path-is-inside`
-- **Framework Integration**: Ready-to-use middleware for Express, Fastify, and Koa with `skipPaths` support
-- **Security Policies**: Pre-configured policies (STRICT, MODERATE, PERMISSIVE, DEVELOPMENT, PRODUCTION)
-- **Timing Attack Mitigation**: Optional timing protection with configurable random delays
-- **Configurable & Extensible**: Fluent API and comprehensive configuration options
-- **High Performance**: Sub-millisecond operations with optional caching
-- **Comprehensive Testing**: 230+ tests covering attack vectors and edge cases
+### Core Capabilities
+- **Multi-layered Protection**: Command injection, SQL injection, XSS, NoSQL injection, path traversal
+- **Advanced Unicode Defense**: Homograph detection, normalization, zero-width character removal  
+- **Context-aware Validation**: Different rules for file paths, URLs, commands, and SQL queries
+- **Framework Integration**: Express, Fastify, and Koa middleware with `skipPaths` support
+- **Security Policies**: Pre-configured (STRICT, MODERATE, PERMISSIVE, DEVELOPMENT, PRODUCTION)
+- **Performance Optimized**: Sub-millisecond operations, <10ms latency
+- **Comprehensive Testing**: 500+ security tests
 
 ## Installation
 
@@ -86,21 +94,9 @@ const customSanitizer = new MCPSanitizer({
   policy: 'MODERATE',
   maxStringLength: 15000,
   allowedProtocols: ['https', 'mcp'],
-  enableTimingProtection: true  // New: Prevent timing attacks
+  blockSeverity: 'MEDIUM'  // Block medium severity and above
 });
 ```
-
-## What's New in v1.1.0 🚀
-
-- **Advanced Security Decoder**: New `security-decoder.js` module handles Unicode, URL encoding, and control characters
-- **Timing Attack Protection**: Optional timing noise to prevent side-channel attacks
-- **Enhanced Path Validation**: Better Windows path normalization and absolute path blocking
-- **skipPaths Support**: Middleware can now skip sanitization for specific routes (health checks, metrics, etc.)
-- **Improved Coverage**: From 76.2% to 100% attack vector blocking
-- **Performance Optimizations**: O(1) path matching for skipPaths feature
-
-See [Security Improvements](./docs/SECURITY_IMPROVEMENTS.md) for detailed changes.
-
 ## Framework Middleware
 
 ### Express.js
@@ -119,8 +115,7 @@ app.use(createMCPMiddleware());
 app.use(createMCPMiddleware({
   policy: 'PRODUCTION',
   mode: 'sanitize', // or 'block'
-  skipPaths: ['/health', '/metrics'],  // New: Skip sanitization for these paths
-  enableTimingProtection: true
+  skipPaths: ['/health', '/metrics']  // Skip sanitization for these paths
 }));
 
 app.post('/tools/:toolName/execute', (req, res) => {
@@ -318,6 +313,7 @@ The MCP Sanitizer leverages trusted, industry-standard security libraries:
 - **[validator](https://github.com/validatorjs/validator.js)** - String validation and sanitization
 - **[sanitize-filename](https://github.com/parshap/node-sanitize-filename)** - Filename sanitization
 - **[path-is-inside](https://github.com/domenic/path-is-inside)** - Path containment checking
+- **[unorm](https://github.com/walling/unorm)** - Unicode normalization (NFC, NFD, NFKC, NFKD)
 
 ## Testing
 
@@ -427,30 +423,26 @@ node benchmark/library-performance.js
 node benchmark/skip-paths-performance.js
 ```
 
-### 📊 Current Security Metrics
+### 📊 Security Testing Coverage
 
-- **Attack Vector Coverage**: 100% (42/42 vectors blocked)
-- **XSS Protection**: 100% (13/13 vectors)
-- **SQL Injection Protection**: 100% (10/10 vectors)
-- **Command Injection Protection**: 100% (10/10 vectors)
-- **Path Traversal Protection**: 100% (9/9 vectors)
-- **Timing Attack Resistance**: <2% variance
-- **Memory Usage Under Attack**: <100MB bounded
-
-See [Security Status](./docs/SECURITY_STATUS.md) for detailed vulnerability analysis.
+- **Attack Vectors Tested**: 42 comprehensive test cases
+- **XSS Vectors**: 13 test cases
+- **SQL Injection Vectors**: 10 test cases
+- **Command Injection Vectors**: 10 test cases
+- **Path Traversal Vectors**: 9 test cases
+- **Memory Safety**: Bounded memory usage under attack
 
 ### 🔒 Security Best Practices
 
 1. **Always use STRICT or PRODUCTION policy for untrusted input**
-2. **Enable timing protection for sensitive operations**
-3. **Regularly update to get latest security patches**
-4. **Test with your specific attack vectors**
-5. **Monitor sanitization warnings and blocked attempts in production**
+2. **Regularly update to get latest security patches**
+3. **Test with your specific attack vectors**
+4. **Monitor sanitization warnings and blocked attempts in production**
+5. **Implement defense-in-depth - don't rely on a single security layer**
 
 ### 📝 Security Documentation
 
-- [Security Status Report](./docs/SECURITY_STATUS.md) - Current vulnerabilities and mitigations
-- [Security Improvements](./docs/SECURITY_IMPROVEMENTS.md) - v1.1.0 security enhancements
+- [Security Documentation](./docs/SECURITY.md) - Comprehensive security information
 - [Benchmark Documentation](./benchmark/README.md) - Performance and security testing
 
 ## Security Reporting
@@ -461,28 +453,6 @@ If you discover a security vulnerability, please email me instead of using the p
 
 MIT License - see [LICENSE](LICENSE) file for details.
 
-## Changelog
-
-### v1.1.0 (2025-08-23) - Security Hardening Release
-- 🔒 **Security Coverage**: Improved from 76.2% to 100% attack vector blocking
-- 🛡️ **Advanced Decoder**: New `security-decoder.js` module for Unicode/URL/HTML entity decoding
-- ⏱️ **Timing Attack Protection**: Added configurable timing noise (<2% variance achieved)
-- 📁 **Path Security**: Enhanced Windows path normalization and absolute path blocking
-- 🚀 **skipPaths Feature**: Middleware can skip sanitization for specific routes (O(1) performance)
-- 🔍 **Command Validation**: Blocks access to sensitive files (/etc/passwd, .ssh/, .aws/, etc.)
-- 📊 **Security Benchmarks**: Added advanced-security-benchmark.js with 42 attack vectors
-- 📝 **Documentation**: Comprehensive security status and improvement documentation
-
-### v1.0.0
-- Initial release with comprehensive security features
-- Integrated trusted security libraries (escape-html, sqlstring, shell-quote, validator, sanitize-filename, path-is-inside)
-- Pre-configured security policies (STRICT, MODERATE, PERMISSIVE, DEVELOPMENT, PRODUCTION)
-- Middleware support for Express, Fastify, and Koa
-- Fluent configuration builder API
-- High performance (sub-millisecond operations)
-- Comprehensive test suite (116+ tests)
-- Support for all major attack vector prevention
-
 ## Related Projects
 
 - [Model Context Protocol](https://github.com/anthropics/model-context-protocol)