mcp-wordpress 2.11.13 → 3.0.0

package/src/tools/posts.ts

@@ -13,7 +13,7 @@
 export { PostTools as default, PostTools } from "./posts/index.js";
 
 // Re-export types and handlers for advanced usage
-export type { CreatePostRequest, PostQueryParams, UpdatePostRequest, WordPressPost } from "../types/wordpress.js";
+export type { CreatePostRequest, PostQueryParams, UpdatePostRequest, WordPressPost } from "@/types/wordpress.js";
 
 // Re-export specific components for granular imports
 export { postToolDefinitions } from "./posts/PostToolDefinitions.js";

package/src/tools/seo/analyzers/ContentAnalyzer.ts

@@ -8,10 +8,10 @@
  * @since 2.7.0
  */
 
-import { LoggerFactory } from "../../../utils/logger.js";
-import { Config } from "../../../config/Config.js";
-import type { WordPressPost } from "../../../types/wordpress.js";
-import type { SEOAnalysisResult, SEOMetrics, SEORecommendation, SEOToolParams } from "../../../types/seo.js";
+import { LoggerFactory } from "@/utils/logger.js";
+import { Config } from "@/config/Config.js";
+import type { WordPressPost } from "@/types/wordpress.js";
+import type { SEOAnalysisResult, SEOMetrics, SEORecommendation, SEOToolParams } from "@/types/seo.js";
 
 /**
  * Content analyzer for SEO evaluation
@@ -88,14 +88,28 @@ export class ContentAnalyzer {
    */
   private stripHtml(html: string): string {
     // Remove HTML tags, scripts, and styles
-    return html
-      .replace(/<script[^>]*>[\s\S]*?<\/script>/gi, "")
-      .replace(/<style[^>]*>[\s\S]*?<\/style>/gi, "")
+    // Apply repeatedly to handle nested/malformed tags
+    let result = html;
+    let previous = "";
+
+    while (result !== previous) {
+      previous = result;
+      result = result
+        .replace(/<script[^>]*>/gi, "")
+        .replace(/<\/script[^>]*>/gi, "")
+        .replace(/<style[^>]*>/gi, "")
+        .replace(/<\/style[^>]*>/gi, "");
+    }
+
+    // Remove remaining content between script/style tags and other HTML
+    result = result
       .replace(/<[^>]*>/g, "")
       .replace(/&nbsp;/g, " ")
       .replace(/&[#\w]+;/g, "")
       .replace(/\s+/g, " ")
       .trim();
+
+    return result;
   }
 
   /**

package/src/tools/seo/auditors/SiteAuditor.ts

@@ -18,10 +18,10 @@
  * @since 2.7.0
  */
 
-import { WordPressClient } from "../../../client/api.js";
-import { LoggerFactory } from "../../../utils/logger.js";
-import type { SiteAuditResult, SEOToolParams, AuditIssue, AuditSection } from "../../../types/seo.js";
-import type { WordPressPost, WordPressPage } from "../../../types/wordpress.js";
+import { WordPressClient } from "@/client/api.js";
+import { LoggerFactory } from "@/utils/logger.js";
+import type { SiteAuditResult, SEOToolParams, AuditIssue, AuditSection } from "@/types/seo.js";
+import type { WordPressPost, WordPressPage } from "@/types/wordpress.js";
 
 /**
  * Configuration for site audit behavior
@@ -736,9 +736,20 @@ export class SiteAuditor {
    * Extract text content from HTML
    */
   private extractTextContent(html: string): string {
-    return html
-      .replace(/<script[^>]*>[\s\S]*?<\/script>/gi, "")
-      .replace(/<style[^>]*>[\s\S]*?<\/style>/gi, "")
+    // Apply repeatedly to handle nested/malformed tags
+    let result = html;
+    let previous = "";
+
+    while (result !== previous) {
+      previous = result;
+      result = result
+        .replace(/<script[^>]*>/gi, "")
+        .replace(/<\/script[^>]*>/gi, "")
+        .replace(/<style[^>]*>/gi, "")
+        .replace(/<\/style[^>]*>/gi, "");
+    }
+
+    return result
       .replace(/<[^>]*>/g, " ")
       .replace(/&[^;]+;/g, " ")
       .replace(/\s+/g, " ")

package/src/tools/seo/generators/MetaGenerator.ts

@@ -7,10 +7,10 @@
  * @since 2.7.0
  */
 
-import { LoggerFactory } from "../../../utils/logger.js";
-import { Config } from "../../../config/Config.js";
-import type { WordPressPost } from "../../../types/wordpress.js";
-import type { SEOMetadata, SEOToolParams } from "../../../types/seo.js";
+import { LoggerFactory } from "@/utils/logger.js";
+import { Config } from "@/config/Config.js";
+import type { WordPressPost } from "@/types/wordpress.js";
+import type { SEOMetadata, SEOToolParams } from "@/types/seo.js";
 
 /**
  * Content safety filters and validation rules
@@ -418,9 +418,20 @@ export class MetaGenerator {
   }
 
   private stripHtml(html: string): string {
-    return html
-      .replace(/<script[^>]*>[\s\S]*?<\/script>/gi, "")
-      .replace(/<style[^>]*>[\s\S]*?<\/style>/gi, "")
+    // Apply repeatedly to handle nested/malformed tags
+    let result = html;
+    let previous = "";
+
+    while (result !== previous) {
+      previous = result;
+      result = result
+        .replace(/<script[^>]*>/gi, "")
+        .replace(/<\/script[^>]*>/gi, "")
+        .replace(/<style[^>]*>/gi, "")
+        .replace(/<\/style[^>]*>/gi, "");
+    }
+
+    return result
       .replace(/<[^>]*>/g, "")
       .replace(/&nbsp;/g, " ")
       .replace(/&[#\w]+;/g, "")
@@ -683,11 +694,21 @@ export class MetaGenerator {
   }
 
   private sanitizeText(text: string): string {
-    return text
-      .replace(/<[^>]*>/g, "") // Remove HTML tags
-      .replace(/javascript:/gi, "") // Remove javascript: urls
-      .replace(/on\w+\s*=/gi, "") // Remove event handlers
-      .trim();
+    let result = text;
+    let previous = "";
+
+    // Apply repeatedly to prevent bypass via nested patterns
+    while (result !== previous) {
+      previous = result;
+      result = result
+        .replace(/<[^>]*>/g, "") // Remove HTML tags
+        .replace(/javascript\s*:/gi, "") // Remove javascript: urls
+        .replace(/data\s*:/gi, "") // Remove data: urls
+        .replace(/vbscript\s*:/gi, "") // Remove vbscript: urls
+        .replace(/on\w+\s*=/gi, ""); // Remove event handlers
+    }
+
+    return result.trim();
   }
 }
 

package/src/tools/seo/generators/SchemaGenerator.ts

@@ -17,9 +17,9 @@
  * @since 2.7.0
  */
 
-import { LoggerFactory } from "../../../utils/logger.js";
-import type { SchemaMarkup, SEOToolParams } from "../../../types/seo.js";
-import type { WordPressPost } from "../../../types/wordpress.js";
+import { LoggerFactory } from "@/utils/logger.js";
+import type { SchemaMarkup, SEOToolParams } from "@/types/seo.js";
+import type { WordPressPost } from "@/types/wordpress.js";
 
 /**
  * Schema generation options

package/src/tools/seo/optimizers/InternalLinkingSuggester.ts

@@ -16,10 +16,10 @@
  * @since 2.7.0
  */
 
-import { WordPressClient } from "../../../client/api.js";
-import { LoggerFactory } from "../../../utils/logger.js";
-import type { InternalLinkSuggestion, SEOToolParams } from "../../../types/seo.js";
-import type { WordPressPost } from "../../../types/wordpress.js";
+import { WordPressClient } from "@/client/api.js";
+import { LoggerFactory } from "@/utils/logger.js";
+import type { InternalLinkSuggestion, SEOToolParams } from "@/types/seo.js";
+import type { WordPressPost } from "@/types/wordpress.js";
 
 /**
  * Configuration for internal linking suggestions

package/src/tools/site.ts

@@ -1,6 +1,6 @@
-import { WordPressClient } from "../client/api.js";
-import { WordPressApplicationPassword } from "../types/wordpress.js";
-import { getErrorMessage } from "../utils/error.js";
+import { WordPressClient } from "@/client/api.js";
+import { WordPressApplicationPassword } from "@/types/wordpress.js";
+import { getErrorMessage } from "@/utils/error.js";
 
 /**
  * Provides tools for managing general site settings and operations on a WordPress site.

package/src/tools/taxonomies.ts

@@ -1,11 +1,11 @@
-import { WordPressClient } from "../client/api.js";
+import { WordPressClient } from "@/client/api.js";
 import {
   CreateCategoryRequest,
   CreateTagRequest,
   UpdateCategoryRequest,
   UpdateTagRequest,
-} from "../types/wordpress.js";
-import { getErrorMessage } from "../utils/error.js";
+} from "@/types/wordpress.js";
+import { getErrorMessage } from "@/utils/error.js";
 
 /**
  * Provides tools for managing taxonomies (categories and tags) on a WordPress site.

package/src/tools/users.ts

@@ -1,7 +1,7 @@
-import { WordPressClient } from "../client/api.js";
-import { CreateUserRequest, UpdateUserRequest, UserQueryParams } from "../types/wordpress.js";
-import { getErrorMessage } from "../utils/error.js";
-import { WordPressDataStreamer, StreamingUtils, StreamingResult } from "../utils/streaming.js";
+import { WordPressClient } from "@/client/api.js";
+import { CreateUserRequest, UpdateUserRequest, UserQueryParams } from "@/types/wordpress.js";
+import { getErrorMessage } from "@/utils/error.js";
+import { WordPressDataStreamer, StreamingUtils, StreamingResult } from "@/utils/streaming.js";
 
 /**
  * Provides tools for managing users on a WordPress site.