Issues

• sensitive-list：清洗字符类含 & 非必要（损害路径可读性，低危）

  Nicholas023/dsh-code-review#36 · Filter by author Nicholas023 opened on Oct 20, 2026

• set-config：engine_bin 拒绝文案与 0o6000 掩码不一致（setgid 语义）

  Nicholas023/dsh-code-review#35 · Filter by author Nicholas023 opened on Oct 20, 2026

• sensitive-list：第二 token 正则扩展名白名单缺 env（token_store.env 漏报）

  Nicholas023/dsh-code-review#34 · Filter by author Nicholas023 opened on Oct 20, 2026

• sensitive-e2e：泄露断言防假绿盲区（死代码 + 可崩溃 + 重复变量）

  Nicholas023/dsh-code-review#33 · Filter by author Nicholas023 opened on Oct 20, 2026

• engine-e2e：key 缺失跳过时仍 exit 0 且文案「实证通过」= 假绿

  Nicholas023/dsh-code-review#32 · Filter by author Nicholas023 opened on Oct 20, 2026

• set-config 双字段同时被拒时丢第二个拒绝原因（?? 短路）

  Nicholas023/dsh-code-review#31 · Filter by author Nicholas023 opened on Oct 20, 2026

• report_dir 校验：home 前缀匹配无路径分隔符守卫（目录逃逸）

  Nicholas023/dsh-code-review#30 · Filter by author Nicholas023 opened on Oct 20, 2026