dsh-http-debug
HTTP network debugging toolset for DeepSeek Harness (dsh): a general-purpose HTTP client with SSRF/private-network protection, per-session request history with replay, response inspection, and a zero-dependency CLI.
安装
$
npx -p @deepseek-ai/dsh dsh plugin --profile web add github:JohnXu22786/net-debug说明文档
阅读完整 README ↗Configuration
All fields are optional; defaults are the safe ones.
| Key | Default | Meaning |
|---|---|---|
ssrf.enabled | true | Master switch for all IP/DNS checks. |
ssrf.blockPrivate | true | Block 10/8, 172.16/12, 192.168/16, CGNAT 100.64/10, ULA fc00::/7. |
ssrf.blockLoopback | true | Block 127.0.0.0/8 and ::1. |
ssrf.blockLinkLocal | true | Block 169.254/16 and fe80::/10 (covers cloud metadata). |
ssrf.blockReserved | true | Block the remaining special-use ranges (documentation, multicast, broadcast, benchmarking, NAT64/6to4 prefixes, …). |
ssrf.whitelist | [] | Hosts / *.wildcards / IPs / CIDRs that always pass. |
client.timeoutMs | 30000 | Per-request timeout in ms. |
client.maxRedirects | 10 | Redirect cap. |
client.maxBodyBytes | 131072 | Captured body bytes; larger bodies are truncated. |
client.wafHeaders | true | Add sane default User-Agent (and Referer if configured) when the caller doesn't send one. |
client.userAgent | a Chrome UA | Default User-Agent. |
client.referer | '' | Default Referer; empty means none. |
history.maxEntries | 200 | Ring-buffer capacity. |
har.enabled | false | Attach HAR to every response by default. |