Update lib/mcp/server.js

elasticdotventures · Copilot · web-flow · commit e842e3ce0987 · 2025-12-06T10:24:51.000+11:00
Co-authored-by: Copilot &lt;175728472+Copilot@users.noreply.github.com&gt;
diff --git a/lib/mcp/server.js b/lib/mcp/server.js
@@ -347,7 +347,8 @@ function createTransport(options = {}) {
 }
 
 async function tailFile(filePath, lineCount) {
-  const fh = await fs.promises.open(filePath, 'r');
+  const safePath = validateLogFilePath(filePath);
+  const fh = await fs.promises.open(safePath, 'r');
   try {
     const stats = await fh.stat();
     let position = stats.size;

Original file line number	Diff line number	Diff line change
`@@ -347,7 +347,8 @@ function createTransport(options = {}) {`
`347`	`347`	`}`
`348`	`348`
`349`	`349`	`async function tailFile(filePath, lineCount) {`
`350`		`- const fh = await fs.promises.open(filePath, 'r');`
	`350`	`+ const safePath = validateLogFilePath(filePath);`
	`351`	`+ const fh = await fs.promises.open(safePath, 'r');`
`351`	`352`	`try {`
`352`	`353`	`const stats = await fh.stat();`
`353`	`354`	`let position = stats.size;`