oh-my-adhd 0.2.9 → 0.2.10

package/dist/mcp/mcp/tools/wiki-export.js

@@ -21,7 +21,16 @@ export function registerWikiExport(server) {
                 pages,
             };
             const date = new Date().toISOString().slice(0, 10);
-            const filePath = outputPath ?? path.join(os.homedir(), `oh-my-adhd-export-${date}.json`);
+            const defaultPath = path.join(os.homedir(), `oh-my-adhd-export-${date}.json`);
+            const resolved = outputPath ? path.resolve(outputPath) : defaultPath;
+            // Require .json extension — prevents LLM-controlled path from clobbering arbitrary config files
+            if (!resolved.endsWith(".json")) {
+                return {
+                    content: [{ type: "text", text: "오류: outputPath는 .json 확장자로 끝나야 합니다." }],
+                    isError: true,
+                };
+            }
+            const filePath = resolved;
             const tmp = filePath + ".tmp";
             await fs.writeFile(tmp, JSON.stringify(exportData, null, 2), "utf-8");
             await fs.rename(tmp, filePath);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oh-my-adhd",
-  "version": "0.2.9",
+  "version": "0.2.10",
   "description": "ADHD second brain — zero-friction capture, auto context restore, unstick. MCP-native Claude Code plugin.",
   "author": "Yeachan Heo",
   "repository": {

package/scripts/session-recall.mjs

@@ -31,17 +31,24 @@ try {
   const openThreads = manifest.filter(t => t.is_open).slice(0, 4);
   if (openThreads.length === 0) process.exit(0);
 
+  // Sanitize stored content before injecting into model context (prompt injection prevention)
+  const sanitize = (s, max) => String(s ?? "")
+    .replace(/[\x00-\x1F\x7F]/g, " ")
+    .replace(/[`$<>]/g, "")
+    .replace(/\bignore (all|previous)\b/gi, "[redacted]")
+    .slice(0, max);
+
   const lines = ["[Second Brain 복원]", ""];
   const top = openThreads[0];
-  lines.push(`🔴 **${top.title}** (${gapLabel(top.updatedAt)})`);
-  if (top.next_action) lines.push(`→ 다음: ${top.next_action.slice(0, 100)}`);
-  if (top.blocker) lines.push(`⛔ 막힌것: ${top.blocker.slice(0, 80)}`);
+  lines.push(`🔴 **${sanitize(top.title, 40)}** (${gapLabel(top.updatedAt)})`);
+  if (top.next_action) lines.push(`→ 다음: ${sanitize(top.next_action, 100)}`);
+  if (top.blocker) lines.push(`⛔ 막힌것: ${sanitize(top.blocker, 80)}`);
 
   if (openThreads.length > 1) {
     lines.push("");
     for (const t of openThreads.slice(1)) {
-      const hint = t.next_action ? ` → ${t.next_action.slice(0, 60)}` : "";
-      lines.push(`• ${t.title} (${gapLabel(t.updatedAt)})${hint}`);
+      const hint = t.next_action ? ` → ${sanitize(t.next_action, 60)}` : "";
+      lines.push(`• ${sanitize(t.title, 30)} (${gapLabel(t.updatedAt)})${hint}`);
     }
   }