dsh-security-guard

DSH runtime security guard plugin — loader import confinement, HTTP Host header validation, and sandbox service deny-list (QVD-2026-52631/57410/52644/52646). AI-assisted patch.

AI Analysis

核心用途是为 DSH 提供运行时安全防护，包括加载器导入限制、HTTP Host 验证及沙箱服务黑名单。适合对 DSH 运行环境有高安全性要求、需要防御特定 QVD 漏洞的安全运维人员。

other

Package: dsh-security-guard
Version: 0.1.0
License: MIT
Last updated: Sep 3, 2026

Install

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:ruanhaodong-tt/dsh-security-guard

README

Read the full README ↗

Configuration / 配置

The web guard accepts an optional trustedHosts array for non-loopback authorities that should be allowed:

- insert:
    - id: dsh-security-web
      name: dsh-security-guard/web
      inject: [webServer]
      config:
        trustedHosts: ["harness.internal:3080"]