mcp-cross

The project demonstrates a strong focus on security, particularly in handling shell command execution and environment variable propagation across Windows and WSL. Key measures include robust argument escaping for `wsl.exe` and login shells, a WSL runner script (`wsl-runner.sh`) that sanitizes the PATH to prevent unintended Windows binary execution, and careful handling of environment variables via `WSLENV` with a Windows environment variable blacklist. Header parsing includes validation against CRLF injection, and sensitive header values are masked in debug logs. The HTTP proxy mode also warns against using insecure HTTP for non-localhost endpoints. There are no apparent hardcoded secrets or malicious patterns.