
Security News
PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
dsh-chat-toc
Advanced tools
DSH web GUI chat table-of-contents: native Turn Rail enhancer with rich previews, bookmarks, search, and Markdown outline export.
DSH Web GUI 的对话导航与大纲增强插件:深度赋能官方原生 Turn Rail 导航轨,告别冗余平行的第二条轨道,100% 融入原生界面。提供悬停卡片双向预览(用户提问 + AI 核心回答)、单条收藏与金光高亮、跨会话持久化、右上角原生扁平小工具栏(搜索 / 收藏过滤 / Markdown 大纲导出)。
100% 原生融合与零视觉负担:
自主稳定悬停卡片(带防抖,绝不闪退):
跨会话永久持久化(Session-Scoped Storage):
右上角扁平极简工具条(原生排版流):
全部 · 仅代码 💻 · 仅工具 ⚙️ 快捷胶囊,长对话中一键精准过滤出代码变更或工具调用的轮次,告别低效盲翻;多语言与明暗主题自适应:
1. 悬停卡片(提问 + AI 核心回复预览,内嵌收藏与复制,右上角扁平工具条):

2. 开启顶部 ⭐ 收藏过滤(已收藏刻度呈金色粒子长条高亮闪耀,未收藏线条淡化):

0.1.5-rc.2(@deepseek-ai/dsh-client-runtime / dsh-client-locale / dsh-client-ui-chat ≥ 0.1.5-rc.2)。peerDependencies 已声明为 >=0.1.5-rc.2 <0.3.0。
本插件依赖以下官方 DOM 契约,它们自 0.1.5-rc.2 起才齐备:
data-chat-flow-kind / data-chat-turn / data-chat-anchor-key(轮次与消息行的权威判据)data-chat-flow-kind="text" 与 "reasoning" 的区分(用于只取回答正文、跳过思考过程)aria-label 内的轮次号(chat.turnNavigation.jump)*_bubble / *_previewPrompt / *_previewResponse(提问文本与官方预览兜底)0.1.5-rc.2、0.1.6-alpha.1/2、0.2.0-rc.1(当前最新)。0.2.0-rc.1 的破坏性改版:官方在该版删除了 markPosition 类名并把刻度改为虚拟化渲染。本插件已改为以刻度按钮自身为锚点,新旧两代通用;并因虚拟化改为每次重新读取,绝不缓存刻度元素引用。data-chat-*)与 aria-label 为主要判据,不依赖易变的 CSS Module 哈希;仅在确有必要时使用「哈希前缀 + 下划线」形式的类名子串。dsh plugin --profile web add dsh-chat-toc
安装或更新后,刷新 dsh web 页面即可无缝体验。
本地开发时可用
dsh plugin --profile web add link:/path/to/dsh-chat-toc以链接方式安装,修改源码后npm run build并刷新页面即可生效。
使用中遇到问题或有功能建议?欢迎到 GitHub Issues 提交反馈,感谢支持!
MIT
FAQs
DSH web GUI chat table-of-contents: native Turn Rail enhancer with rich previews, bookmarks, search, and Markdown outline export.
The npm package dsh-chat-toc receives a total of 259 weekly downloads. As such, dsh-chat-toc popularity was classified as not popular.
We found that dsh-chat-toc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.