Mason Huang 7eecfa411d fix(browser): unblock loopback CDP readiness under strict SSRF defaults (#66354) ...

Merged via squash.

Prepared head SHA: d9030ff2f0
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com>
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com>
Reviewed-by: @hxy91819

2026-04-14 16:30:43 +08:00

..

routes

fix(browser): relax default hostname SSRF guard

2026-04-14 12:42:59 +05:30

act-policy.ts

Browser: unify /act route action execution and contract errors (#63977)

2026-04-09 22:54:33 -05:00

bridge-auth-registry.ts

refactor: dedupe browser trimmed readers

2026-04-08 00:09:41 +01:00

bridge-server.auth.test.ts

fix(browser): gate sandbox noVNC helper auth

2026-04-10 18:01:26 +01:00

bridge-server.ts

fix(browser): gate sandbox noVNC helper auth

2026-04-10 18:01:26 +01:00

browser-utils.test.ts

…

cdp-proxy-bypass.test.ts

Browser: remove timer dependency from proxy tests

2026-04-07 15:07:57 +01:00

cdp-proxy-bypass.ts

…

cdp-reachability-policy.ts

fix(browser): detect local attachOnly loopback CDP sessions (#66080)

2026-04-13 19:46:56 +02:00

cdp-timeouts.test.ts

…

cdp-timeouts.ts

fix(browser): detect local attachOnly loopback CDP sessions (#66080)

2026-04-13 19:46:56 +02:00

cdp.helpers.test.ts

fix(browser): unblock loopback CDP readiness under strict SSRF defaults (#66354)

2026-04-14 16:30:43 +08:00

cdp.helpers.ts

fix(browser): unblock loopback CDP readiness under strict SSRF defaults (#66354)

2026-04-14 16:30:43 +08:00

cdp.screenshot-params.test.ts

fix(plugins): finish channel lint cleanup

2026-04-06 14:48:35 +01:00

cdp.test.ts

test: isolate browser network guards

2026-04-11 00:07:41 +01:00

cdp.ts

refactor: remove redundant browser cdp conversions

2026-04-10 21:43:34 +01:00

chrome-mcp.snapshot.test.ts

…

chrome-mcp.snapshot.ts

fix(cycles): remove browser cli and tlon runtime seams

2026-04-10 11:45:28 +01:00

chrome-mcp.test.ts

feat(browser): add qa web runtime support

2026-04-12 19:41:06 -07:00

chrome-mcp.ts

feat(browser): add qa web runtime support

2026-04-12 19:41:06 -07:00

chrome-user-data-dir.test-harness.ts

…

chrome.default-browser.test.ts

test: stabilize browser and provider ci shards

2026-04-06 03:38:28 +01:00

chrome.executables.test.ts

Browser: consolidate duplicate helper surfaces via facade delegation (#63957)

2026-04-09 19:49:04 -05:00

chrome.executables.ts

refactor: remove redundant browser helper conversions

2026-04-10 21:48:38 +01:00

chrome.launch-args.test.ts

…

chrome.loopback-ssrf.integration.test.ts

fix(browser): unblock loopback CDP readiness under strict SSRF defaults (#66354)

2026-04-14 16:30:43 +08:00

chrome.profile-decoration.ts

…

chrome.test.ts

fix(browser): unblock loopback CDP readiness under strict SSRF defaults (#66354)

2026-04-14 16:30:43 +08:00

chrome.ts

fix(browser): tighten strict browser hostname navigation (#64367)

2026-04-10 13:18:53 -06:00

client-actions-core.ts

fix(cycles): remove browser cli and tlon runtime seams

2026-04-10 11:45:28 +01:00

client-actions-observe.ts

…

client-actions-state.ts

…

client-actions-types.ts

…

client-actions-url.ts

…

client-actions.ts

…

client-actions.types.ts

fix(cycles): remove browser cli and tlon runtime seams

2026-04-10 11:45:28 +01:00

client-fetch.loopback-auth.test.ts

test: isolate browser network guards

2026-04-11 00:07:41 +01:00

client-fetch.ts

fix: guard browser control fetches

2026-04-10 12:46:26 +01:00

client.test.ts

…

client.ts

fix(cycles): remove browser cli and tlon runtime seams

2026-04-10 11:45:28 +01:00

client.types.ts

fix(cycles): remove browser cli and tlon runtime seams

2026-04-10 11:45:28 +01:00

config-refresh-source.ts

fix(ci): narrow browser config refresh seam

2026-03-27 23:38:56 +00:00

config.test.ts

fix(browser): preserve legacy strict SSRF alias

2026-04-14 12:50:02 +05:30

config.ts

fix(browser): preserve legacy strict SSRF alias

2026-04-14 12:50:02 +05:30

constants.ts

…

control-auth.auto-token.test.ts

test(browser): share control auth persistence checks

2026-04-12 05:33:09 +01:00

control-auth.test.ts

fix(browser): auto-generate browser control auth token for none/trusted-proxy modes [AI] (#63280)

2026-04-09 09:55:24 +05:30

control-auth.ts

fix(cycles): repair broken type surfaces

2026-04-11 13:42:17 +01:00

control-service.plugin-disabled.test.ts

test: stabilize browser and provider ci shards

2026-04-06 03:38:28 +01:00

control-service.ts

…

csrf.ts

refactor: dedupe lowercase normalizer readers

2026-04-07 11:18:18 +01:00

errors.test.ts

fix: in the browser extension s tabs action route the (#310) (#63332)

2026-04-10 10:03:16 -06:00

errors.ts

fix: in the browser extension s tabs action route the (#310) (#63332)

2026-04-10 10:03:16 -06:00

form-fields.ts

fix(cycles): remove browser cli and tlon runtime seams

2026-04-10 11:45:28 +01:00

http-auth.ts

refactor: dedupe browser and memory lowercase helpers

2026-04-07 13:44:41 +01:00

local-dispatch.runtime.ts

fix(cycles): remove browser cli and tlon runtime seams

2026-04-10 11:45:28 +01:00

navigation-guard.test.ts

fix(browser): relax default hostname SSRF guard

2026-04-14 12:42:59 +05:30

navigation-guard.ts

fix(browser): relax default hostname SSRF guard

2026-04-14 12:42:59 +05:30

output-atomic.ts

…

paths.test.ts

…

paths.ts

fix(runtime): stabilize provider and channel runtime tests

2026-03-27 18:15:40 +00:00

plugin-enabled.test.ts

refactor(deadcode): remove extension wrapper shims

2026-04-06 17:18:03 +01:00

profile-capabilities.ts

…

profiles-service.test.ts

fix: validate browser profile driver before cdp policy

2026-04-10 20:31:27 +01:00

profiles-service.ts

fix: validate browser profile driver before cdp policy

2026-04-10 20:31:27 +01:00

profiles.test.ts

…

profiles.ts

…

proxy-files.test.ts

refactor(plugin-sdk): untangle extension test seams

2026-03-29 23:43:53 +01:00

proxy-files.ts

…

pw-ai-module.ts

…

pw-ai-state.ts

…

pw-ai.e2e.test.ts

test(e2e): align release harness coverage

2026-04-12 16:08:12 +01:00

pw-ai.ts

Browser: unify /act route action execution and contract errors (#63977)

2026-04-09 22:54:33 -05:00

pw-role-snapshot.test.ts

…

pw-role-snapshot.ts

refactor: remove redundant browser helper conversions

2026-04-10 21:48:38 +01:00

pw-session.browserless.live.test.ts

…

pw-session.connections.test.ts

…

pw-session.create-page.navigation-guard.test.ts

test: isolate browser network guards

2026-04-11 00:07:41 +01:00

pw-session.get-page-for-targetid.extension-fallback.test.ts

…

pw-session.mock-setup.ts

…

pw-session.page-cdp.test.ts

…

pw-session.page-cdp.ts

…

pw-session.test.ts

…

pw-session.ts

refactor: remove redundant browser session conversions

2026-04-10 21:46:52 +01:00

pw-tools-core.activity.ts

…

pw-tools-core.browser-ssrf-guard.test.ts

fix: restore main ci

2026-04-08 23:30:18 +01:00

pw-tools-core.clamps-timeoutms-scrollintoview.test.ts

fix: restore main ci

2026-04-08 23:30:18 +01:00

pw-tools-core.downloads.ts

refactor: remove redundant browser helper conversions

2026-04-10 21:48:38 +01:00

pw-tools-core.interactions.batch.test.ts

fix(browser): re-check interaction-driven navigations (#63226)

2026-04-08 13:39:07 -06:00

pw-tools-core.interactions.evaluate.abort.test.ts

fix(browser): re-check interaction-driven navigations (#63226)

2026-04-08 13:39:07 -06:00

pw-tools-core.interactions.navigation-guard.test.ts

Handle subframe document navigations in browser guards (#64371)

2026-04-10 12:51:23 -06:00

pw-tools-core.interactions.set-input-files.test.ts

test: stabilize browser and provider ci shards

2026-04-06 03:38:28 +01:00

pw-tools-core.interactions.ts

refactor: simplify provider channel conversions

2026-04-11 01:08:23 +01:00

pw-tools-core.last-file-chooser-arm-wins.test.ts

Browser: unify /act route action execution and contract errors (#63977)

2026-04-09 22:54:33 -05:00

pw-tools-core.responses.ts

refactor: dedupe browser trimmed readers

2026-04-08 00:09:41 +01:00

pw-tools-core.screenshots-element-selector.test.ts

test: stabilize browser and provider ci shards

2026-04-06 03:38:28 +01:00

pw-tools-core.shared.ts

refactor: dedupe browser trimmed readers

2026-04-08 00:09:41 +01:00

pw-tools-core.snapshot.navigate-guard.test.ts

test: isolate browser network guards

2026-04-11 00:07:41 +01:00

pw-tools-core.snapshot.ts

refactor: simplify browser snapshot strings

2026-04-11 00:07:03 +01:00

pw-tools-core.state.ts

refactor: remove redundant browser state conversions

2026-04-10 21:46:00 +01:00

pw-tools-core.storage.ts

refactor: remove redundant browser helper conversions

2026-04-10 21:48:38 +01:00

pw-tools-core.test-harness.ts

Handle subframe document navigations in browser guards (#64371)

2026-04-10 12:51:23 -06:00

pw-tools-core.trace.ts

…

pw-tools-core.ts

…

pw-tools-core.waits-next-download-saves-it.test.ts

test: simplify browser download path checks

2026-04-10 23:48:27 +01:00

rate-limit-message.ts

refactor: break runtime import cycles

2026-04-09 03:56:22 +01:00

request-policy.test.ts

…

request-policy.ts

refactor: dedupe browser string readers

2026-04-07 05:06:55 +01:00

resolved-config-refresh.ts

fix(ci): narrow browser config refresh seam

2026-03-27 23:38:56 +00:00

runtime-lifecycle.ts

…

safe-filename.ts

refactor: dedupe browser trimmed readers

2026-04-08 00:09:41 +01:00

screenshot.test.ts

refactor: remove redundant browser screenshot conversions

2026-04-10 21:44:53 +01:00

screenshot.ts

refactor: remove redundant browser screenshot conversions

2026-04-10 21:44:53 +01:00

server-context.availability.ts

fix(browser): unblock loopback CDP readiness under strict SSRF defaults (#66354)

2026-04-14 16:30:43 +08:00

server-context.chrome-test-harness.ts

…

server-context.constants.ts

…

server-context.ensure-browser-available.waits-for-cdp-ready.test.ts

fix(browser): detect local attachOnly loopback CDP sessions (#66080)

2026-04-13 19:46:56 +02:00

server-context.existing-session.test.ts

test: isolate browser network guards

2026-04-11 00:07:41 +01:00

server-context.hot-reload-profiles.test.ts

test: stabilize browser and provider ci shards

2026-04-06 03:38:28 +01:00

server-context.lifecycle.test.ts

refactor(browser): share lifecycle cleanup helpers

2026-04-04 12:17:46 +01:00

server-context.lifecycle.ts

refactor(browser): share lifecycle cleanup helpers

2026-04-04 12:17:46 +01:00

server-context.list-profiles.test.ts

fix(browser): detect local attachOnly loopback CDP sessions (#66080)

2026-04-13 19:46:56 +02:00

server-context.loopback-direct-ws.test.ts

fix(browser): unblock managed loopback CDP startup and control (#66043)

2026-04-13 18:48:48 +02:00

server-context.remote-profile-tab-ops.fallback.test.ts

fix(browser): relax default hostname SSRF guard

2026-04-14 12:42:59 +05:30

server-context.remote-profile-tab-ops.playwright.test.ts

chore: update dependencies and oxc tooling

2026-04-10 19:28:42 +01:00

server-context.remote-profile-tab-ops.test-helpers.ts

refactor: dedupe repeated test helpers

2026-04-08 09:58:22 +01:00

server-context.remote-tab-ops.harness.ts

fix: in the browser extension s tabs action route the (#310) (#63332)

2026-04-10 10:03:16 -06:00

server-context.reset.test.ts

test(browser): drop redundant module resets

2026-04-03 20:43:49 +09:00

server-context.reset.ts

…

server-context.selection.ts

fix(browser): unblock managed loopback CDP startup and control (#66043)

2026-04-13 18:48:48 +02:00

server-context.stop-running-browser.test.ts

refactor(browser): share lifecycle cleanup helpers

2026-04-04 12:17:46 +01:00

server-context.tab-ops.ts

fix(browser): use loopback policy for json-new fallback

2026-04-14 12:42:59 +05:30

server-context.tab-selection-state.test.ts

fix(browser): use loopback policy for json-new fallback

2026-04-14 12:42:59 +05:30

server-context.test-harness.ts

chore(plugins): drop dead channel test any suppressions

2026-04-06 15:45:18 +01:00

server-context.ts

fix(browser): detect local attachOnly loopback CDP sessions (#66080)

2026-04-13 19:46:56 +02:00

server-context.types.ts

fix(cycles): remove browser cli and tlon runtime seams

2026-04-10 11:45:28 +01:00

server-lifecycle.test.ts

test: stabilize browser and provider ci shards

2026-04-06 03:38:28 +01:00

server-lifecycle.ts

…

server-middleware.ts

fix(browser): gate sandbox noVNC helper auth

2026-04-10 18:01:26 +01:00

server.agent-contract-act-error-codes.test.ts

Browser: unify /act route action execution and contract errors (#63977)

2026-04-09 22:54:33 -05:00

server.agent-contract-form-layout-act-commands.test.ts

Browser: unify /act route action execution and contract errors (#63977)

2026-04-09 22:54:33 -05:00

server.agent-contract-snapshot-endpoints.test.ts

Browser: unify /act route action execution and contract errors (#63977)

2026-04-09 22:54:33 -05:00

server.agent-contract.test-harness.ts

…

server.auth-fail-closed.test.ts

fix(browser): auto-generate browser control auth token for none/trusted-proxy modes [AI] (#63280)

2026-04-09 09:55:24 +05:30

server.auth-token-gates-http.test.ts

…

server.control-server.test-harness.ts

fix: keep browser cdp range wide for high ports

2026-04-11 13:55:08 +01:00

server.evaluate-disabled-does-not-block-storage.test.ts

refactor(deadcode): remove extension wrapper shims

2026-04-06 17:18:03 +01:00

server.post-tabs-open-profile-unknown-returns-404.test.ts

refactor: simplify extension conversions

2026-04-11 01:37:23 +01:00

session-tab-registry.test.ts

…

session-tab-registry.ts

refactor: dedupe browser whatsapp qa lowercase helpers

2026-04-07 20:58:01 +01:00

snapshot-roles.ts

…

target-id.ts

refactor: dedupe browser and memory lowercase helpers

2026-04-07 13:44:41 +01:00

test-fetch.ts

…

test-port.ts

…

trash.test.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

trash.ts

…

url-pattern.test.ts

…

url-pattern.ts

…