[conartist6]

Wh... wh... what? The problem is that ANSI escape codes aren't being stripped from text before processing, and you think a HUMAN should be doing that? That'd be like having a secretary hand-check every SQL query as it arrives at the database instead of using a query builder...

[Rygian]

A human should defintely be doing that.

By "that" it is understood: enforcing that the code cleans up unsafe inputs before processing them.

If there is no human doing that enforcement, the code has no chance of being secure.

[conartist6]

Why! Do you use your eyeballs to spot SQL injection? Or do you maybe use a tool? A linter perhaps?

[Rygian]

I develop my code defensively, and I argue that the developers of MCP servers need to develop their code defensively too.

Not sure what it is that you intend to argue.