dsh-route-fence-linter
by Vladimir-Kryshchenko · Vladimir-Kryshchenko/dsh-route-fence-linter
★ 0 Stars
⑂ 0 Forks
Updated: Aug 22, 2026
MIT
TypeScript
Original language: English
About
Audits every plugin HTTP route in a profile for a browser-trust fence: plugin routes win the web server's longest-prefix match ahead of the /api gateway, so they never see its trust check and must pin the Host to loopback themselves. Grades PASS/WARN/FAIL per route and fails a fence that compares Origin to Host without pinning it (bypassable by DNS rebinding). Ships as a CLI for CI and a route_fence_scan tool.
Similar plugins
Transport-level authentication gate for the DeepSeek Harness Web GUI with server-side sessions, HttpOnly cookies, IP-based login throttling, and an scrypt password CLI.
★ 0
dsh plugin --profile web add @summersec/dsh-web-authby jkrandom-sudo
Security audit for DeepSeek Harness plugins: static permission profile with file/line evidence + a runtime sentinel gating credential access and unknown-host egress · DSH 插件安全审计:静态权限画像(附文件/行号证据)+ 运行时哨
★ 4
↓ 143/wk
MIT
TypeScript
Sep 11, 2026
dsh plugin --profile web add dsh-plugin-auditby wulun811
Trust pipeline for deepseek-harness plugins: deterministic static scan (11 rules) + LLM-driven audit protocol + two-part scorecard, with optional runtime guard (T1 sentinel / T2 fs & child_process hoo
★ 3
↓ 548/wk
MIT
TypeScript
Sep 11, 2026
dsh plugin --profile web add @jieai/dsh-plugin-vetby dkjsiogu
DeepSeek Harness plugin: browse host files/folders in the Web composer and insert absolute paths
★ 0
MIT
TypeScript
Aug 15, 2026
dsh plugin --profile web add dsh-path-browserby hutao562
DeepSeek Harness plugin: a sidebar tab that takes over the whole page with another DSH instance's Web GUI, plus a remote session-state badge. 在侧边栏顶部加一个「远程」标签,整页切到另一台主机上的 DSH。
★ 0
MIT
JavaScript
Sep 11, 2026
dsh plugin --profile web add dsh-remote-dshby lokic7123-star
Multi-route high-availability, fault isolation and observability for DeepSeek Harness: model groups fail over between authorized provider routes on rate limits, retry-after, transport and auth failure
★ 3
MIT
TypeScript
Aug 28, 2026
dsh plugin --profile web add dsh-route-resilience