An Allow Rule for MCP Server 'a' Also Matched 'a__b'. How Claude Code's Names Collided
Before Claude Code 2.1.299, an allow rule for mcp__a also allowed servers named a__b and a_. Why the names collide, a test, and a grep for your settings.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.