Rudy Mizrahi CelekliandCursor 4a5b24c3fa fix(browser): count only grammatical CSP nonce and hash sources (#10135) ...

CSP3 requires a complete base64-value, so truncated and illegal nonce
and hash tokens were being reported as real sources.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-11-12 06:56:10 +08:00

..

assets

feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

2026-11-10 05:11:20 -05:00

execution

fix(browser): validate retained runtime source identity (#9941)

2026-11-11 02:28:27 -05:00

history

fix(captures): keep escaped JSON strings flat in the capture parser (#10139)

2026-11-12 06:07:21 +08:00

modules

fix(browser): preserve module analysis ownership through cleanup (#10051)

2026-11-11 17:14:30 +08:00

network

feat(artifacts): inspect classic iNES container regions (#2816)

2026-10-31 15:49:16 +08:00

BrowserScenario.test.ts

test: strengthen source oracles and prune duplicate proof

2026-11-10 16:02:45 -05:00

BrowserScenarioPartialObservation.ts

feat(environment): build agent environments from a prompt (#6946)

2026-10-24 21:51:41 +08:00

BrowserScenarioResponseValues.ts

fix(browser): save from gzip, deflate and cached responses within a bound (#7361)

2026-10-28 05:08:27 +08:00

BrowserScenarioSecrets.test.ts

fix(browser-scenario)!: preserve scenario evidence and coverage (#9896)

2026-11-10 23:48:13 -05:00

BrowserScenarioSecrets.ts

fix(browser): admit query expansion and guard saved-value publication (#10052)

2026-11-11 17:15:40 +08:00

BrowserScenarioSerialization.ts

fix(browser): admit query expansion and guard saved-value publication (#10052)

2026-11-11 17:15:40 +08:00

BrowserScenarioSessionPort.ts

fix(browser): redact startup cleanup diagnostics

2026-10-27 04:59:27 +08:00

CdpAgentHints.integration.test.ts

fix(browser): bind passive captures to selected CDP documents (#10031)

2026-11-11 17:44:08 +08:00

CdpAuthorizedMainFrame.ts

fix(browser): preserve main-frame identity and scope refusal context

2026-10-24 08:48:19 +08:00

CdpAuthorizedTarget.ts

fix(browser): preserve discovery identity ambiguity

2026-10-27 11:45:25 +08:00

CdpBrowserProvider.admission.test.ts

fix(browser): drain admitted operations before closing provider (#10033)

2026-11-11 17:28:39 +08:00

CdpBrowserProvider.ts

fix(browser): drain admitted operations before closing provider (#10033)

2026-11-11 17:28:39 +08:00

CdpCaptureCompleteness.test.ts

refactor(test): keep coverage at behavioral boundaries (#474)

2026-08-11 18:34:32 +08:00

CdpCaptureCompleteness.ts

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

CdpCaptureContextRetention.test.ts

fix(browser): unify script and context attribution facts

2026-10-27 02:30:04 +08:00

CdpCaptureDocuments.baseUrl.test.ts

test: preserve repeated attribute URL node identity

2026-11-10 16:36:38 -05:00

CdpCaptureDocuments.test.ts

fix(browser): share admitted accessibility identities

2026-10-27 12:57:32 +08:00

CdpCaptureDocuments.ts

fix(browser): preserve DOM length units in captures and comparisons (#7971)

2026-10-29 11:27:01 +08:00

CdpCaptureDomNamespaces.ts

fix(browser): resolve prefixed XHTML form actions

2026-10-23 18:07:46 +08:00

CdpCaptureEventBodyShapes.ts

fix(browser): admit JSON shape expansion against shared retention

2026-10-25 09:49:26 +08:00

CdpCaptureEventHandlers.ts

fix(browser): preserve source-map declaration uncertainty (#7945)

2026-10-29 18:50:26 +08:00

CdpCaptureEventHelpers.ts

fix(browser): keep negative script columns Chrome reports (#8684)

2026-11-03 14:50:00 +08:00

CdpCaptureEvents.consoleTimestamp.test.ts

fix(browser)!: preserve unknown console timestamps

2026-10-21 03:43:20 +08:00

CdpCaptureEvents.coverageStart.test.ts

fix(browser): separate domain readiness and worker attribution coverage

2026-10-24 02:37:47 +08:00

CdpCaptureEvents.eventBudget.test.ts

fix(browser): admit JSON shape expansion against shared retention

2026-10-25 09:49:26 +08:00

CdpCaptureEvents.redirectBodyShape.test.ts

fix(evidence): preserve literal keys and response body ownership

2026-10-12 16:17:29 +08:00

CdpCaptureEvents.shapeBudget.test.ts

fix(browser): share media type interpretation

2026-10-27 10:26:32 +08:00

CdpCaptureEvents.ts

fix(browser): centralize CDP network event facts

2026-10-27 02:57:58 +08:00

CdpCaptureEvents.webSocketFrames.test.ts

fix(browser)!: preserve unknown WebSocket frame facts

2026-10-21 05:00:37 +08:00

CdpCaptureEventState.ts

fix(browser): unify script and context attribution facts

2026-10-27 02:30:04 +08:00

CdpCaptureEventTypes.ts

fix: bind identity and coverage to the producing rule (#1513)

2026-10-10 17:14:47 +08:00

CdpCaptureStorage.test.ts

fix(browser): preserve independently observed storage identities (#10029)

2026-11-11 17:22:30 +08:00

CdpCaptureStorage.ts

fix(browser): preserve independently observed storage identities (#10029)

2026-11-11 17:22:30 +08:00

CdpCaptureStorageFingerprints.ts

fix(browser): preserve independently observed storage identities (#10029)

2026-11-11 17:22:30 +08:00

CdpCaptureValues.test.ts

test: assert exact cancellation reasons across browser and desktop

2026-11-10 16:02:45 -05:00

CdpCaptureValues.ts

fix(browser): unify script and context attribution facts

2026-10-27 02:30:04 +08:00

CdpCommandRejection.ts

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

CdpConnection.ts

fix(browser): reject malformed UTF-8 CDP protocol bytes (#10040)

2026-11-11 17:13:45 +08:00

CdpDiscoveryTargets.test.ts

test: reduce brittle assertions and test-only runtime paths (#9289)

2026-11-08 02:02:31 +08:00

CdpDiscoveryTargets.ts

fix(browser): normalize discovery wire facts at the shared boundary (#7204)

2026-10-27 12:16:50 +08:00

CdpElectronInspection.test.ts

fix(browser): bind passive captures to selected CDP documents (#10031)

2026-11-11 17:44:08 +08:00

CdpElectronInspection.ts

fix(browser): bind passive captures to selected CDP documents (#10031)

2026-11-11 17:44:08 +08:00

CdpElectronProvider.ts

fix(browser): normalize discovery wire facts at the shared boundary (#7204)

2026-10-27 12:16:50 +08:00

CdpElectronScriptEvents.ts

fix(browser): unify script and context attribution facts

2026-10-27 02:30:04 +08:00

CdpElectronScriptMetadata.test.ts

fix(browser): unify script and context attribution facts

2026-10-27 02:30:04 +08:00

CdpElectronScripts.ts

refactor(browser): centralize passive source deadlines

2026-10-27 11:24:09 +08:00

CdpElectronWorkers.ts

fix(browser): unify worker target admission across capture workflows

2026-10-26 23:44:08 +08:00

CdpEndpoint.test.ts

test: preserve exact failure controls after consolidation

2026-11-10 16:18:18 -05:00

CdpEndpoint.ts

feat(browser): reuse admitted browser-socket transport and allow discovery_timeout_ms (#9203)

2026-11-08 23:06:56 +00:00

CdpFrameIdentity.test.ts

fix(browser): unify CDP frame and document identity facts

2026-10-27 02:00:58 +08:00

CdpFrameIdentity.ts

fix(browser): unify CDP frame and document identity facts

2026-10-27 02:00:58 +08:00

CdpLargeBase64.test.ts

fix(browser): validate large base64 without regexp stack overflow

2026-10-19 21:46:23 +08:00

CdpNetworkEventFacts.ts

fix(browser): keep negative script columns Chrome reports (#8684)

2026-11-03 14:50:00 +08:00

CdpObservationSession.ts

fix(browser): retain prior-hop response facts in session timelines (#7807)

2026-10-29 02:04:15 +08:00

CdpOptionalCommand.ts

fix(browser): preserve command failures and reject malformed replies

2026-10-09 04:12:48 +08:00

CdpOriginScopeError.ts

fix(browser): preserve main-frame identity and scope refusal context

2026-10-24 08:48:19 +08:00

CdpPageCapture.ts

fix(browser): preserve DOM length units in captures and comparisons (#7971)

2026-10-29 11:27:01 +08:00

CdpPageCaptureScripts.test.ts

test: assert exact cancellation reasons across browser and desktop

2026-11-10 16:02:45 -05:00

CdpPageCaptureScripts.ts

refactor(browser): centralize passive source deadlines

2026-10-27 11:24:09 +08:00

CdpPageCaptureWorkers.test.ts

fix(browser): unify worker target admission across capture workflows

2026-10-26 23:44:08 +08:00

CdpPageCaptureWorkers.ts

fix(browser): unify worker target admission across capture workflows

2026-10-26 23:44:08 +08:00

CdpSafeMetadata.test.ts

fix(browser): count only grammatical CSP nonce and hash sources (#10135)

2026-11-12 06:56:10 +08:00

CdpSafeMetadata.ts

fix(browser): count only grammatical CSP nonce and hash sources (#10135)

2026-11-12 06:56:10 +08:00

CdpScreenshot.ts

fix(browser): bind passive captures to selected CDP documents (#10031)

2026-11-11 17:44:08 +08:00

CdpScriptContextFacts.ts

fix(browser): keep negative script columns Chrome reports (#8684)

2026-11-03 14:50:00 +08:00

CdpScriptSourceBudget.ts

refactor: retire test-only fallback exports

2026-10-24 18:04:35 +08:00

CdpScriptSourceCapture.ts

refactor(browser): centralize passive source deadlines

2026-10-27 11:24:09 +08:00

CdpSnapshotNodes.test.ts

fix(browser): share DOM snapshot admission

2026-10-17 15:59:57 +08:00

CdpSnapshotNodes.ts

fix(browser): share DOM snapshot admission

2026-10-17 15:59:57 +08:00

CdpSnapshotStrings.ts

fix(browser): share DOM snapshot admission

2026-10-17 15:59:57 +08:00

CdpTargetEvents.ts

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

CdpTargetSession.ts

feat(browser): reuse admitted browser-socket transport and allow discovery_timeout_ms (#9203)

2026-11-08 23:06:56 +00:00

CdpTargetSessionOwner.ts

fix(browser): distinguish shutdown admission from failed cleanup (#10038)

2026-11-11 17:15:15 +08:00

CdpWebMcpDiscovery.ts

fix(browser): bind passive captures to selected CDP documents (#10031)

2026-11-11 17:44:08 +08:00

CdpWorkerTarget.ts

fix(browser): unify worker target admission across capture workflows

2026-10-26 23:44:08 +08:00

ChromiumSandbox.ts

fix(browser)!: keep the Chromium sandbox for REA-launched browsers (#8738)

2026-11-04 23:54:29 +08:00

ElectronCaptureCleanup.boundary.test.ts

fix(process): retain native ownership evidence through cleanup

2026-10-19 20:04:00 +08:00

ElectronCaptureCleanup.test.ts

fix(process): retain native ownership evidence through cleanup

2026-10-19 20:04:00 +08:00

ElectronCaptureCleanup.ts

refactor: centralize Electron execution limits and action projection

2026-10-24 02:35:59 +08:00

ElectronFileScope.cleanup.test.ts

test(electron): expect the native path of an authorized ASAR file (#9549)

2026-11-09 21:46:34 +08:00

ElectronFileScope.nodes.test.ts

fix(electron): refuse linked ASAR parent declarations

2026-10-27 10:03:17 +08:00

ElectronFileScope.ts

refactor(admission): own inspector, web, and CLI state per host (#8058)

2026-10-30 05:23:33 +08:00

ElectronProcessCleanup.test.ts

fix(process): preserve ownership through termination and cleanup (#9891)

2026-11-11 17:20:53 +08:00

ElectronProcessCleanup.ts

fix(process): retain native ownership evidence through cleanup

2026-10-19 20:04:00 +08:00

IsolatedWebBundleAnalyzer.test.ts

fix(browser): preserve module analysis ownership through cleanup (#10051)

2026-11-11 17:14:30 +08:00

IsolatedWebBundleAnalyzer.ts

fix(browser): preserve module analysis ownership through cleanup (#10051)

2026-11-11 17:14:30 +08:00

PlaywrightBrowserScenarioProvider.test.ts

fix(browser): preserve physical failures through later cancellation (#10046)

2026-11-11 18:37:09 +08:00

PlaywrightBrowserScenarioProvider.ts

fix(browser): preserve physical failures through later cancellation (#10046)

2026-11-11 18:37:09 +08:00

PlaywrightElectronActiveActions.test.ts

fix(browser): preserve physical failures through later cancellation (#10046)

2026-11-11 18:37:09 +08:00

PlaywrightElectronActiveActions.ts

fix(browser): preserve physical failures through later cancellation (#10046)

2026-11-11 18:37:09 +08:00

PlaywrightElectronActiveFuses.test.ts

test: strengthen regression oracles and cleanup ownership (#8152)

2026-10-31 00:22:16 +08:00

PlaywrightElectronActiveFuses.ts

fix(electron): own fuse cleanup through adapters and shutdown

2026-10-17 21:24:00 +08:00

PlaywrightElectronActiveProjection.test.ts

test: prefer structured assertions over recovery prose (#6379)

2026-10-23 04:47:39 +08:00

PlaywrightElectronActiveProjection.ts

fix(browser): name web-bundle budgets and recover web deadlines (#6036)

2026-10-22 05:47:38 +08:00

PlaywrightElectronActiveProvider.test.ts

fix(process)!: retain inspection cancellation and cleanup ownership (#10113)

2026-11-11 16:37:48 -05:00

PlaywrightElectronActiveProvider.ts

fix(process)!: retain inspection cancellation and cleanup ownership (#10113)

2026-11-11 16:37:48 -05:00

PlaywrightElectronExecution.ts

refactor: centralize Electron execution limits and action projection

2026-10-24 02:35:59 +08:00

PlaywrightExecutionBoundary.test.ts

fix(browser): stop expired work and release deadline resources

2026-10-22 08:52:56 +08:00

PlaywrightExecutionBoundary.ts

feat(artifacts): inspect classic iNES container regions (#2816)

2026-10-31 15:49:16 +08:00

PlaywrightScenarioActions.ts

fix(browser): disclose opaque redirect coverage gaps (#7943)

2026-10-29 07:57:00 +08:00

PlaywrightScenarioArtifacts.test.ts

feat(browser): reuse saved response values across scenario steps (#7267)

2026-10-27 08:15:52 +08:00

PlaywrightScenarioArtifacts.ts

feat(browser): reuse saved response values across scenario steps (#7267)

2026-10-27 08:15:52 +08:00

PlaywrightScenarioBrowser.test.ts

fix(browser): retain initialization through cancelled startup (#10045)

2026-11-11 17:14:37 +08:00

PlaywrightScenarioBrowser.ts

fix(browser): retain initialization through cancelled startup (#10045)

2026-11-11 17:14:37 +08:00

PlaywrightScenarioEvents.sharedContext.test.ts

fix(browser-scenario)!: preserve scenario evidence and coverage (#9896)

2026-11-10 23:48:13 -05:00

PlaywrightScenarioEvents.test.ts

fix(browser): accept 3-digit HTTP response status codes up to 999 (#8075)

2026-11-04 19:29:44 +08:00

PlaywrightScenarioEvents.ts

fix(browser-scenario)!: preserve scenario evidence and coverage (#9896)

2026-11-10 23:48:13 -05:00

PlaywrightScenarioRequest.test.ts

fix(browser): admit query expansion and guard saved-value publication (#10052)

2026-11-11 17:15:40 +08:00

PlaywrightScenarioRequest.ts

fix(browser): admit query expansion and guard saved-value publication (#10052)

2026-11-11 17:15:40 +08:00

PlaywrightScenarioServiceWorkers.test.ts

fix(browser): preserve discovery identity ambiguity

2026-10-27 11:45:25 +08:00

PlaywrightScenarioServiceWorkers.ts

fix(browser): preserve discovery identity ambiguity

2026-10-27 11:45:25 +08:00

PlaywrightScenarioSession.test.ts

fix(browser): retain initialization through cancelled startup (#10045)

2026-11-11 17:14:37 +08:00

PlaywrightScenarioSession.ts

fix(browser): retain initialization through cancelled startup (#10045)

2026-11-11 17:14:37 +08:00

PlaywrightScenarioStorage.test.ts

fix: retain unresolved browser secret declarations as input errors

2026-10-24 03:11:07 +08:00

PlaywrightScenarioStorage.ts

fix(browser): unify script and context attribution facts

2026-10-27 02:30:04 +08:00

PngVisualDiff.test.ts

fix(browser): mask unused PNG transparency key bits (#9890)

2026-11-10 17:39:53 -05:00

PngVisualDiff.ts

fix(browser): mask unused PNG transparency key bits (#9890)

2026-11-10 17:39:53 -05:00

providerIdentities.ts

refactor: give Inspector its own capability directory (#869)

2026-10-07 13:53:25 +08:00

ScenarioActionSequence.ts

fix(electron): record actions skipped after a failed action (#6023)

2026-10-21 08:06:25 -07:00

ScenarioCommandDeadline.ts

fix(browser): retain launch failure diagnostics (#7826)

2026-10-29 01:56:39 +08:00

StructuredFieldToken.ts

fix(browser): parse complete COOP and COEP structured items

2026-10-17 13:26:13 +08:00

WebArtifactCleanup.test.ts

fix(browser): bind child artifact errors to exact cleanup leases (#10047)

2026-11-11 17:14:44 +08:00

WebArtifactCleanup.ts

fix(browser): bind child artifact errors to exact cleanup leases (#10047)

2026-11-11 17:14:44 +08:00

WebBundleAnalysisWorker.test.ts

fix(browser): preserve physical worker launch failures during cancellation (#10145)

2026-11-12 06:18:04 +08:00

WebBundleAnalysisWorker.ts

fix(browser): preserve physical worker launch failures during cancellation (#10145)

2026-11-12 06:18:04 +08:00

WebBundleAnalysisWorkerCapacity.test.ts

test: reduce brittle assertions and test-only runtime paths (#9289)

2026-11-08 02:02:31 +08:00

WebBundleAnalysisWorkerProtocol.ts

feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

2026-11-10 05:11:20 -05:00

WebBundleAnalysisWorkerReadCompletion.test.ts

fix(workers): preserve artifact failures through cleanup (#10055)

2026-11-11 17:25:48 +08:00

WebBundleAnalysisWorkerServer.test.ts

feat: add FreeBuff agent support for REA setup (#2736)

2026-10-25 11:29:17 +08:00

WebBundleAnalysisWorkerServer.ts

feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

2026-11-10 05:11:20 -05:00

WebBundleAnalysisWorkerStartup.test.ts

fix(process)!: retain inspection cancellation and cleanup ownership (#10113)

2026-11-11 16:37:48 -05:00

WebSourceMapFetcher.test.ts

fix(browser): retain source-map cleanup and discarded-map capacity (#10053)

2026-11-11 18:38:52 +08:00

WebSourceMapFetcher.ts

fix(browser): retain source-map cleanup and discarded-map capacity (#10053)

2026-11-11 18:38:52 +08:00