dsh-trusted-page

The DSH Web client only enables Host settings persistence on loopback addresses. When you access the dashboard through a Cloudflare Tunnel, nginx reverse proxy, or LAN address, the settings mirror degrades to memory-only mode and the Models page fails to load the provider catalog. dsh-trusted-page turns this remote-domain-trust issue into a single visual row in the settings panel: type a domain, press Enter, and both the API-side Host/Origin fence and the browser-side page authority check update instantly with no restart.

Core capabilities include a tag-list UI under General settings for adding and removing trusted domains (host, host:port, IPv6 literals), automatic normalization that strips URL prefixes and paths while rejecting malformed input, and write-through semantics that match the server fence exactly. The security model is unchanged: requests from untrusted hosts still receive a 403, the page still requires a session cookie, and the plugin only relaxes domains that the operator declares in the authenticated settings panel.

It suits operators who manage DSH Web over a non-loopback address: as long as the domain already routes to the DSH service, one entry in the panel and a hard refresh restore normal functionality.