ha-mcp-dev 7.0.0.dev279__tar.gz → 7.0.0.dev280__tar.gz

{ha_mcp_dev-7.0.0.dev279/src/ha_mcp_dev.egg-info → ha_mcp_dev-7.0.0.dev280}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ha-mcp-dev
-Version: 7.0.0.dev279
+Version: 7.0.0.dev280
 Summary: Home Assistant MCP Server - Complete control of Home Assistant through MCP
 Author-email: Julien <github@qc-h.net>
 License: MIT
@@ -275,6 +275,7 @@ This project is licensed under the MIT License - see the [LICENSE](LICENSE) file
 - **[@saphid](https://github.com/saphid)** — Config entry options flow tools (initial design, #590).
 - **[@adraguidev](https://github.com/adraguidev)** — Fix menu-based config entry flows for group helpers (#647).
 - **[@transportrefer](https://github.com/transportrefer)** — Integration options inspection (`ha_get_integration` schema support, #689).
+- **[@restriction](https://github.com/restriction)** — Responsible disclosure: python_transform sandbox missing call target validation.
 
 ---
 

{ha_mcp_dev-7.0.0.dev279 → ha_mcp_dev-7.0.0.dev280}/README.md

@@ -245,6 +245,7 @@ This project is licensed under the MIT License - see the [LICENSE](LICENSE) file
 - **[@saphid](https://github.com/saphid)** — Config entry options flow tools (initial design, #590).
 - **[@adraguidev](https://github.com/adraguidev)** — Fix menu-based config entry flows for group helpers (#647).
 - **[@transportrefer](https://github.com/transportrefer)** — Integration options inspection (`ha_get_integration` schema support, #689).
+- **[@restriction](https://github.com/restriction)** — Responsible disclosure: python_transform sandbox missing call target validation.
 
 ---
 

{ha_mcp_dev-7.0.0.dev279 → ha_mcp_dev-7.0.0.dev280}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ha-mcp-dev"
-version = "7.0.0.dev279"
+version = "7.0.0.dev280"
 description = "Home Assistant MCP Server - Complete control of Home Assistant through MCP"
 readme = "README.md"
 requires-python = ">=3.13,<3.14"

{ha_mcp_dev-7.0.0.dev279 → ha_mcp_dev-7.0.0.dev280}/src/ha_mcp/utils/python_sandbox.py

@@ -1,8 +1,9 @@
 """
-Python expression sandbox using AST validation.
+Python expression validation for dashboard transformations.
 
-Provides safe execution of Python expressions for dashboard transformations.
-Blocks imports, file I/O, dangerous builtins, and common sandbox escapes.
+Restricts expressions to a known-safe subset: dict/list operations,
+basic control flow, and whitelisted methods. Not a security boundary —
+callers are already authenticated MCP users with full HA access.
 """
 
 import ast
@@ -189,6 +190,11 @@ def validate_expression(expr: str) -> tuple[bool, str]:
                         f"Forbidden method: {method_name} (allowed: {', '.join(sorted(SAFE_METHODS))})",
                     )
 
+            # Reject subscript calls, chained calls, and all other non-standard targets
+            # e.g., config['fn']() or config.get('fn')() would bypass Name/Attribute checks
+            else:
+                return False, f"Forbidden call target type: {type(node.func).__name__}"
+
         # Block function definitions (could be used for obfuscation)
         if isinstance(node, (ast.FunctionDef, ast.AsyncFunctionDef, ast.ClassDef)):
             return False, "Forbidden: function/class definitions not allowed"

{ha_mcp_dev-7.0.0.dev279 → ha_mcp_dev-7.0.0.dev280/src/ha_mcp_dev.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ha-mcp-dev
-Version: 7.0.0.dev279
+Version: 7.0.0.dev280
 Summary: Home Assistant MCP Server - Complete control of Home Assistant through MCP
 Author-email: Julien <github@qc-h.net>
 License: MIT
@@ -275,6 +275,7 @@ This project is licensed under the MIT License - see the [LICENSE](LICENSE) file
 - **[@saphid](https://github.com/saphid)** — Config entry options flow tools (initial design, #590).
 - **[@adraguidev](https://github.com/adraguidev)** — Fix menu-based config entry flows for group helpers (#647).
 - **[@transportrefer](https://github.com/transportrefer)** — Integration options inspection (`ha_get_integration` schema support, #689).
+- **[@restriction](https://github.com/restriction)** — Responsible disclosure: python_transform sandbox missing call target validation.
 
 ---