rps321321/obsidian-mcp-pro

Full-codebase security and correctness audit: 75+ fixes across 42 files, verified against current library documentation.

Breaking Changes

• get_tags renamed to list_tags for consistency with other listing tools
• delete_note requires confirm: true for permanent deletes
• CORS defaults to localhost-only (was *); configure allowedOrigins for remote clients
• cosineSimilarity throws on dimension mismatch instead of returning 0
• listNotes throws for non-existent folders instead of returning []

Highlights

Security (20 fixes)

• SSRF prevention on embedding URLs (scheme + host validation)
• Symlink escape prevention in vault traversal
• Blocked dangerous file extensions (.exe, .bat, .ps1, etc.)
• SVG XSS mitigation (served as text/plain)
• javascript:/data:/vbscript: URI blocking in canvas links
• Security headers on all HTTP responses
• Auth failure logging, session ID validation, file permission hardening
• Input validation bounds on all Zod schemas across every tool

Correctness (17 fixes)

• Bases not: filter logic, loadStore race condition, saveStore concurrency
• Block ID matching, row.links population, frontmatter preservation
• Canvas self-loop/duplicate edge rejection, config validation
• Link exact matching (no more prefix false positives)

Performance (9 fixes)

• find_similar_notes reduced from O(n*m) to O(n) via centroid
• Cache prune no longer evicts out-of-scope entries
• Bases tool uses cached reads, vault stats optimized
• Graph traversal capped at depth 3 with maxResults

Type Safety

• noUncheckedIndexedAccess and noImplicitReturns enabled
• ~94 indexed-access safety fixes across the codebase
• ESLint typed linting with no-floating-promises and no-misused-promises
• Node engine bumped to >=18.18.0

See CHANGELOG.md for the full list.