mirror of
https://github.com/deepseek-ai/deepseek-harness.git
synced 2026-08-15 14:02:47 +02:00
A dangling colon (harness.internal:) or zero-padded port parses cleanly while WHATWG silently rewrites it, turning an intended exact-port grant into an any-port grant. Replace the character blacklist with a round-trip check: an entry must read back from parsing exactly as written (case aside), refusing the whole rewrite class at load.