@xxxyz/dsh-mcp-manager 2.0.5 → 2.0.6

package/install.mjs

@@ -273,7 +273,7 @@ async function pollApi(port, timeoutMs) {
     try {
       const res = await fetch(url, {
         method: 'POST',
-        headers: { 'content-type': 'application/json' },
+        headers: { 'content-type': 'application/json', 'x-dsh-plugin': 'dsh-mcp-manager' },
         body: JSON.stringify({ op: 'mcpm-list', args: {} }),
         signal: timeoutSignal(2000),
       })

package/lib/client.js

@@ -61,9 +61,12 @@ const factory = (require) => {
     }
 
     function apiCall(op, args) {
+      // `x-dsh-plugin` is the cross-site (CSRF) gate header the host half
+      // requires on every request; a cross-origin page cannot attach it
+      // without a CORS preflight that this route never answers.
       return fetch('/dsh-mcp-manager/api', {
         method: 'POST',
-        headers: { 'content-type': 'application/json' },
+        headers: { 'content-type': 'application/json', 'x-dsh-plugin': 'dsh-mcp-manager' },
         body: JSON.stringify({ op, args: args || {} }),
       }).then((r) => r.json()).catch((e) => ({ ok: false, error: String((e && e.message) || e) }))
     }

package/lib/index.js

@@ -936,6 +936,42 @@ export default {
                     kind: 'exact',
                     path: '/dsh-mcp-manager/api',
                     handler: async (req, res) => {
+                        // Cross-site (CSRF) gate. This route mutates config files, so it
+                        // must only be reachable from the DSH web UI (same origin) or
+                        // local tooling. A browser cross-site request cannot attach a
+                        // custom header without a CORS preflight, and this route never
+                        // answers preflights — requiring `x-dsh-plugin` is the primary
+                        // gate; POST-only and the Origin check are defense in depth.
+                        const hdr = (name) => {
+                            const v = req.headers?.[name];
+                            return Array.isArray(v) ? v[0] ?? '' : v ?? '';
+                        };
+                        if (String(req.method || 'POST').toUpperCase() !== 'POST') {
+                            res.writeHead(405, { 'content-type': 'application/json' });
+                            res.end(JSON.stringify({ ok: false, error: 'method not allowed' }));
+                            return;
+                        }
+                        if (hdr('x-dsh-plugin') !== 'dsh-mcp-manager') {
+                            res.writeHead(403, { 'content-type': 'application/json' });
+                            res.end(JSON.stringify({ ok: false, error: 'missing plugin gate header' }));
+                            return;
+                        }
+                        const origin = hdr('origin');
+                        if (origin) {
+                            let sameOrigin = false;
+                            try {
+                                const u = new URL(origin);
+                                const hostHdr = hdr('host') || '';
+                                sameOrigin =
+                                    /^(localhost|127\.0\.0\.1|\[::1\])$/i.test(u.hostname) || u.host === hostHdr;
+                            }
+                            catch (e) { /* unparseable origin → rejected below */ }
+                            if (!sameOrigin) {
+                                res.writeHead(403, { 'content-type': 'application/json' });
+                                res.end(JSON.stringify({ ok: false, error: 'cross-origin request rejected' }));
+                                return;
+                            }
+                        }
                         res.writeHead(200, { 'content-type': 'application/json' });
                         try {
                             let payload = {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xxxyz/dsh-mcp-manager",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "DSH-standard MCP manager plugin: Settings UI + HTTP API + model-facing mcp_manager_* tools. Composed as a loader entry, survives restarts. Install via npx, PowerShell, bash or node.",
   "type": "module",
   "main": "lib/index.js",