Agustin Rivera 109267b82a Handle subframe document navigations in browser guards (#64371) ...

* fix(browser): guard subframe document navigations

Co-authored-by: zsx <git@zsxsoft.com>

* fix(browser): preserve quarantine on subframe blocks

* chore(changelog): add subframe SSRF guard entry

* fix(browser): fail closed when subframe frame resolution throws

isSubframeDocumentNavigationRequest now returns true (apply SSRF
check) instead of false (skip check) when request.frame() throws,
so transient renderer churn cannot bypass the subframe navigation
policy guard.

---------

Co-authored-by: zsx <git@zsxsoft.com>
Co-authored-by: Devin Robison <drobison@nvidia.com>

2026-04-10 12:51:23 -06:00

..

src

Handle subframe document navigations in browser guards (#64371)

2026-04-10 12:51:23 -06:00

browser-bridge.ts

refactor: split browser sdk imports for sandbox and audit

2026-04-03 16:39:47 +01:00

browser-cdp.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

browser-config.ts

Browser: consolidate duplicate helper surfaces via facade delegation (#63957)

2026-04-09 19:49:04 -05:00

browser-control-auth.ts

Browser: consolidate duplicate helper surfaces via facade delegation (#63957)

2026-04-09 19:49:04 -05:00

browser-doctor.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

browser-host-inspection.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

browser-maintenance.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

browser-profiles.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

browser-runtime-api.ts

refactor: route plugin sdk through extension barrels

2026-03-27 13:46:16 +00:00

cli-metadata.ts

perf(plugins): trim channel boundary core imports

2026-04-08 08:52:52 +01:00

index.test.ts

test: speed up browser plugin entry tests

2026-04-07 19:59:46 +01:00

index.ts

test: speed up browser plugin entry tests

2026-04-07 19:59:46 +01:00

openclaw.plugin.json

refactor: add browser plugin runtime package

2026-03-26 22:20:39 +00:00

package.json

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

plugin-registration.ts

Browser: align plugin registration mutability

2026-04-07 23:52:55 +01:00

register.runtime.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

runtime-api.ts

refactor: route plugin sdk facades through extension barrels

2026-03-27 20:47:36 +00:00

setup-api.ts

refactor: dedupe extension lowercase readers

2026-04-07 12:18:01 +01:00

test-support.ts

fix(browser): route test support through sdk testing

2026-04-04 01:07:28 +09:00

tsconfig.json

chore(plugins): bulk add package boundary tsconfig rollout

2026-04-07 08:48:23 +01:00