dsh-fileview

DSH keeps its native workspace file opener privileged and loopback-only, which means remote users reaching the DSH Web UI over LAN or VPN cannot trigger a desktop application when clicking a file link. dsh-fileview closes this gap by intercepting the ctx.remote.session.openWorkspacePath call on remote pages and opening a fully in-browser overlay viewer instead, so remote devices can inspect and edit workspace files without any local application. Loopback pages continue to use the native OS opener with zero behavioral change.

The plugin delivers a full-size inline viewer with scrolling, text selection, editing, and saving, plus automatic encoding detection across BOM (UTF-8 / UTF-16LE / UTF-16BE), plain UTF-8, and GB18030. Saves preserve the original BOM, encoding, and CRLF/LF line endings. Images (PNG, JPG, GIF, WebP, BMP) render inline; files larger than 2 MB fall back to a read-only paginated window. A slim file browser on the left edge offers multi-root switching, breadcrumbs, and parent-directory navigation. Every save is atomic, using a temporary file plus rename to guard against partial writes.

On the security side, the Host registers no file routes at all unless config.roots is explicitly set; path containment is a case-insensitive absolute-path check that rejects traversal and out-of-root requests with 403; a same-origin guard ensures incoming requests match the serving host. The plugin is ideal for users who access the DSH Web UI from a remote browser and need a safe, allowlisted way to view and edit workspace text files and images without exposing the entire filesystem.