scotthuang 37af50f3db fix(browser): keep user tabs open on SSRF-denied reads (#78874) ...

Summary:
- Split browser SSRF quarantine from tab closure so read-only browser operations do not close user-owned tabs on policy denial.
- Keep OpenClaw-initiated navigation/create paths closing blocked tabs, and add regression coverage for both contracts.
- Update changelog with contributor credit.

Verification:
- pnpm test extensions/browser/src/browser/pw-session.assert-navigation-safety.test.ts extensions/browser/src/browser/pw-tools-core.snapshot.navigate-guard.test.ts
- pnpm test extensions/browser/src/browser/pw-tools-core.browser-ssrf-guard.test.ts extensions/browser/src/browser/pw-tools-core.snapshot.test.ts
- Exact-head CI success: 25535578610
- Exact-head Real behavior proof success: 25536652326

Thanks @scotthuang.

2026-05-08 08:13:04 +01:00

..

skills/browser-automation

docs(browser): explain actionable aria snapshot refs

2026-04-25 09:51:34 +01:00

src

fix(browser): keep user tabs open on SSRF-denied reads (#78874)

2026-05-08 08:13:04 +01:00

browser-bridge.ts

refactor: split browser sdk imports for sandbox and audit

2026-04-03 16:39:47 +01:00

browser-cdp.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

browser-config.ts

fix(plugin-sdk): align browser tab cleanup type exports

2026-04-25 03:53:21 +01:00

browser-control-auth.ts

Browser: consolidate duplicate helper surfaces via facade delegation (#63957)

2026-04-09 19:49:04 -05:00

browser-doctor.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

browser-host-inspection.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

browser-maintenance.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

browser-profiles.ts

fix: align browser profile facade exports

2026-04-25 08:46:13 +01:00

browser-runtime-api.ts

refactor: route plugin sdk through extension barrels

2026-03-27 13:46:16 +00:00

cli-metadata.ts

fix(browser): lazy-load browser CLI runtime

2026-04-25 11:40:20 +01:00

index.test.ts

refactor: move plugin api test helper to sdk

2026-04-28 00:24:54 +01:00

index.ts

test: speed up browser plugin entry tests

2026-04-07 19:59:46 +01:00

openclaw.plugin.json

fix: enforce plugin tool manifest contracts

2026-05-02 06:21:08 +01:00

package.json

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

plugin-registration.ts

fix(browser): lazy-load browser CLI runtime

2026-04-25 11:40:20 +01:00

register.runtime.ts

fix(browser): lazy-load browser CLI runtime

2026-04-25 11:40:20 +01:00

runtime-api.ts

refactor: narrow extension runtime api barrels

2026-04-27 20:34:35 +01:00

setup-api.ts

refactor: dedupe extension lowercase readers

2026-04-07 12:18:01 +01:00

test-fetch.ts

perf: slim browser tab tests

2026-04-23 21:07:11 +01:00

test-support.ts

refactor: split generic plugin test fixtures

2026-04-28 01:21:39 +01:00

tsconfig.json

fix(ci): restore extension package boundary excludes

2026-04-29 00:57:08 -07:00