spring-ai-mcp-server-resources

The server reads and exposes the content of all files within a configurable local directory (`resource.directory.path`). While the code itself does not introduce direct RCE or arbitrary file system traversal vulnerabilities, a misconfigured `resource.directory.path` could expose sensitive local files. The `mimeType` is hardcoded to 'text/plain', which could be misleading for clients expecting correct content types for non-plain text files. No content sanitization is performed on the served documents. Proper configuration of `resource.directory.path` to a controlled, non-sensitive directory is crucial.