Hiro-Chiba/fileview v3.1.1

on GitHub

FileView 3.1.1 is a security release for the MCP server. Update if you run fv --mcp-server for an AI client.

Security

• The MCP write_file and delete_file tools refused sensitive paths such as .git/hooks by matching the raw argument, so a client could bypass the check with spellings such as .git//hooks/pre-commit or .git/./config and plant a Git hook that runs on the next Git command. The check now uses the normalized path relative to the root after resolving symlinked parent directories, and it refuses everything inside .git, including deleting .git itself. On Windows, names that resolve to .git, such as .git., .git::$INDEX_ALLOCATION, or the short name GIT~1, are refused as well.

What's Changed

• docs: Correct three comments that disagree with the code by @Hiro-Chiba in #262
• fix(mcp): Check sensitive paths after normalizing them by @Hiro-Chiba in #263
• test: Give the search sequence test a fixed root name by @Hiro-Chiba in #265
• chore(release): Prepare v3.1.1 by @Hiro-Chiba in #264

Full Changelog: v3.1.0...v3.1.1