Files
obsidian-mcp/package.json
Peter.Morton 57b58a0d22 fix: allow ampersands in filenames while blocking command injection (v1.1.2)
Fixes #2 - Files with & in their names (e.g., 'Research & Development.md')
were being incorrectly sanitized, causing search and file-not-found errors.

Changes:
- Removed & from DANGEROUS_CHARS regex
- Single & is safe in quoted arguments passed to CLI
- Dangerous && patterns still blocked by COMMAND_INJECTION_PATTERNS
- Also allows (), [], {} which are safe in quoted args

Version: 1.1.2

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-14 17:05:18 -05:00

40 lines
951 B
JSON

{
"name": "obsidian-mcp",
"version": "1.1.2",
"description": "MCP Bundle for Obsidian CLI - Enable AI assistants to manage Obsidian vaults through Model Context Protocol",
"type": "module",
"main": "dist/index.js",
"scripts": {
"build": "tsc",
"validate-manifest": "mcpb validate manifest.json",
"pack": "npm run build && mcpb pack",
"test": "jest",
"dev": "tsc --watch",
"validate-tools": "node scripts/validate-tools.js"
},
"keywords": [
"mcp",
"obsidian",
"model-context-protocol",
"ai-assistant",
"note-taking"
],
"author": "",
"license": "MIT",
"engines": {
"node": ">=18.0.0"
},
"dependencies": {
"@modelcontextprotocol/sdk": "^1.0.0",
"zod": "^3.22.4"
},
"devDependencies": {
"@anthropic-ai/mcpb": "^2.1.2",
"@types/jest": "^29.5.11",
"@types/node": "^20.10.6",
"jest": "^29.7.0",
"ts-jest": "^29.1.1",
"typescript": "^5.3.3"
}
}