dsh-remote-trust: Fixing the DeepSeek Harness Settings Interface Behind a Reverse Proxy

When DSH Harness is accessed via a domain name, client-side security policies may classify the request as non-local, rendering the settings page unusable. The `dsh-remote-trust` plugin injects a script that modifies `globalThis` to mark the current domain as a “trusted local” origin, thereby bypassing the `isLoopback` check and restoring normal operation of features such as image persistence. The plugin does not modify source code and supports silent fallback; however, it relaxes security controls and is only suitable for private deployments that have `--trusted-host` configured and are protected by additional authentication.

Read More