fix: use constant-time comparison for session ID validation#2039

Open

navalerakesh wants to merge 2 commits into

modelcontextprotocol:mainfrom

navalerakesh:fix/timing-safe-session-id-comparison

Commits on May 9, 2026

fix: use constant-time comparison for session ID validation
navalerakesh
committed
fix: use for-of loop to satisfy unicorn/no-for-loop lint rule
navalerakesh
committed