github · jcodemunch-mcpHEAD

Evidence

worktree_path = _resolve_worktree_path(cwd, name)

        resolved = str(Path(worktree_path).resolve())

    else:

        print("ERROR: need cwd+name or worktreePath in stdin payload", file=sys.stderr)

        sys.exit(1)

    if event_type == "create":

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Evidence

"",

        ""

      ],

      "answer": "Flask implements `before_request` and `after_request` hooks through the use of decorators. \n\n- The `@app.before_request` decorator is used to register a function to run before each request. This function can be used to perform tasks such as authentication, logging, or setting up the environment for the request.\n\n- The `@app.after_request` decorator is used to register a function to run after each request. This function can be used to perform tasks suc

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Evidence

"""Post or update a PR comment via gh CLI."""

    if not PR_NUMBER or not GITHUB_TOKEN:

        print("::warning::No PR_NUMBER or GITHUB_TOKEN — printing review to stdout")

        print(body)

        return

    # Check for existing speedreview comment to update

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Evidence

print("[ab] §1.1 default-shape benchmark …", flush=True)

    r11 = bench_11_default_shape(repo, storage)

    print("[ab] §1.1 narrow-query parity check …", flush=True)

    r11_narrow = bench_11_narrow_parity(repo, storage)

    print("[ab] §1.2 budget-adherence benchmark …", flush=True)

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Evidence

row["query"] = query

            task_rows.append(row)

            status = "ok" if "error" not in row else f"ERR:{row['error'][:60]}"

            print(f"    [{chunk_size}] '{query}' → {row.get('tokens', '?'):,} tokens  ({status})", file=sys.stderr)

        results_by_chunk[chunk_size] = {

            "chunk_size": chunk_size,

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Evidence

try:

        owner, name = resolve_repo(repo, storage_path)

    except ValueError as e:

        return {"error": str(e)}

    # Load index ONCE for both modes

    store = IndexStore(base_path=storage_path)

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

return -2, "", "git command timed out"

    except Exception as exc:

        logger.debug("git subprocess error: %s", exc, exc_info=True)

        return -3, "", str(exc)

def get_churn_rate(

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

return {"status": "indexed", "folder": folder, "result": result}

        except Exception as exc:

            mark_reindex_failed(repo_id, str(exc))

            return {"status": "error", "folder": folder, "error": str(exc)}

    async def run(self) -> None:

        """Main loop: monitor for crashed tasks and restart them. Self-restarts on crash."""

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

try:

        owner, name = resolve_repo(repo, storage_path)

    except ValueError as e:

        return {"error": str(e)}

    store = IndexStore(base_path=storage_path)

    index = store.load_index(owner, name)

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

try:

        owner, name = resolve_repo(repo, storage_path)

    except ValueError as e:

        return {"error": str(e)}

    store = IndexStore(base_path=storage_path)

    index = store.load_index(owner, name)

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

try:

        owner, name = resolve_repo(repo, storage_path)

    except ValueError as e:

        return {"error": str(e)}

    store = IndexStore(base_path=storage_path)

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

try:

        owner, name = _resolve(repo, storage_path)

    except ValueError as e:

        return {"error": str(e)}

    store = IndexStore(base_path=storage_path)

    index = store.load_index(owner, name)

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

try:

        owner, name = resolve_repo(repo, storage_path)

    except ValueError as e:

        return {"error": str(e)}

    store = IndexStore(base_path=storage_path)

    index = store.load_index(owner, name)

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

try:

        owner, name = resolve_repo(repo, storage_path)

    except ValueError as e:

        return {"error": str(e)}

    store = IndexStore(base_path=storage_path)

    index = store.load_index(owner, name)

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

try:

        owner, name = resolve_repo(repo, storage_path)

    except ValueError as e:

        return {"error": str(e)}

    store = IndexStore(base_path=storage_path)

    index = store.load_index(owner, name)

Remediation

Log the full exception server-side with a correlation ID; return only {"error_id": id, "message": "internal error"} to the caller. Never enable Flask debug mode in production.

Evidence

read_stream,

                        write_stream,

                        server.create_initialization_options(),

                    )

            except asyncio.CancelledError:

                pass

            finally:

                _sessions.pop(new_id, None)

                _session_tasks.pop(new_id, None)

Remediation

Log the exception at minimum (`logger.exception(e)`), emit a metric, or re-raise if the error is not recoverable. If you genuinely want to ignore an exception, say so with a comment.

Evidence

try:

        landmarks = _build_landmark_section()

        if landmarks:

            snapshot_text += landmarks

    except Exception:

        pass  # Landmark enrichment must not block compaction

    # Return snapshot as hook output for context injection.

    # PreCompact has no hookSpecificOutput variant in Claude Code's schema,

Remediation

Log the exception at minimum (`logger.exception(e)`), emit a metric, or re-raise if the error is not recoverable. If you genuinely want to ignore an exception, say so with a comment.

Evidence

if raw is not None:

        try:

            return max(0.0, float(raw))

        except ValueError:

            pass

    return DEFAULT_THRESHOLD

Remediation

Log the exception at minimum (`logger.exception(e)`), emit a metric, or re-raise if the error is not recoverable. If you genuinely want to ignore an exception, say so with a comment.

Evidence

if self._process and self._process.poll() is None:

            try:

                self._send_request("shutdown", {})

                self._send_notification("exit", None)

            except Exception:

                pass

            try:

                self._process.terminate()

                self._process.wait(timeout=5)

Remediation

Log the exception at minimum (`logger.exception(e)`), emit a metric, or re-raise if the error is not recoverable. If you genuinely want to ignore an exception, say so with a comment.

Evidence

extra_spec = None

    if effective_extra:

        try:

            extra_spec = pathspec.PathSpec.from_lines("gitignore", effective_extra)

        except Exception:

            pass

    skip_dirs_regex = _build_skip_dirs_regex()

    for dirpath, dirnames, filenames in os.walk(str(root), followlinks=False):

Remediation

Log the exception at minimum (`logger.exception(e)`), emit a metric, or re-raise if the error is not recoverable. If you genuinely want to ignore an exception, say so with a comment.