DeepSeek/deepseek-harness
1
0
Fork 0
mirror of https://github.com/deepseek-ai/deepseek-harness synced 2026-08-15 21:04:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(web): validate search hit provenance (round 2)

Browse Source
This commit is contained in:
Hypatia May
2026-07-27 12:27:11 +08:00
parent 891e9035e7
commit 222096e3cf
3 changed files with 47 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
packages/host/apiproxy/src/api-proxy.ts
View File

@@ -630,10 +630,14 @@ export function createApiProxy(ctx: Context, defaults: ApiProxyDefaults): ApiPro
limit: SESSION_SEARCH_LIMIT,
}, { signal })
if (isAborted(signal)) return cancelled()
// The id filter is the authorization boundary. Re-check the provider
// projection before emitting it so a backend regression cannot leak
// a session that `session.list` withheld.
const authorized = page.items.filter(hit => visibleIds.has(hit.header.id))
// The filters are the authorization boundary. Re-check the complete
// provider provenance before emitting its snippet so a backend
// regression cannot pair an allowed header with excluded content.
const authorized = page.items.filter(hit =>
visibleIds.has(hit.header.id)
&& hit.bestMatch.sessionId === hit.header.id
&& hit.bestMatch.surface === 'current'
&& MESSAGE_TYPES.has(hit.bestMatch.type))
return ok(request, {
items: authorized.slice(0, SESSION_SEARCH_LIMIT).map(hit => ({
sessionId: hit.header.id,