yasshmittalandClaude Opus 5.5 c22d7cd756 fix(browser): keep malformed Content-Length declarations unknown (#2773) ...

* fix(browser): keep malformed Content-Length declarations unknown

Response metadata normalized Content-Length with Number(), truncation and
clamping, so "-5", "0x10", "1e3" and "+12" became observed lengths 0, 16,
1000 and 12. RFC 9110 section 8.6 defines the field as 1*DIGIT; any other
spelling declares no length. Parse only decimal digits within the safe
integer range and keep every other value null.

Fixes #2596

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* test(browser): cover the largest accepted Content-Length

Pin the safe-integer boundary beside the overflow case so a future change
cannot reject the largest representable declared length unnoticed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-13 21:48:55 +08:00

..

assets

fix(artifacts): retain read cleanup ownership through CLI and MCP shutdown

2026-10-13 16:08:41 +08:00

execution

perf(browser): normalize precise coverage once by script identity

2026-10-11 02:48:59 +08:00

history

fix(captures): name the violated HAR schema constraint (#2708)

2026-10-13 16:22:24 +08:00

modules

fix(artifacts): retain read cleanup ownership through CLI and MCP shutdown

2026-10-13 16:08:41 +08:00

network

fix(browser): preserve body API provenance through script export

2026-10-12 14:12:19 +08:00

BrowserProcessStartup.ts

refactor(runtime): name all silent catch causes without changing diagnostics (#637)

2026-10-06 05:58:46 +08:00

BrowserScenario.test.ts

fix(browser): redact encoded declared secrets consistently

2026-10-13 07:52:55 +08:00

BrowserScenarioPartialObservation.ts

fix(browser): keep elapsed capture timing independent of wall-clock changes

2026-10-13 15:02:54 +08:00

BrowserScenarioSecrets.ts

fix(browser): redact encoded declared secrets consistently

2026-10-13 07:52:55 +08:00

BrowserScenarioSessionPort.ts

fix(browser): retain startup owners and coordinate retryable close

2026-10-11 00:03:22 +08:00

CdpAuthorizedMainFrame.ts

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

CdpAuthorizedTarget.ts

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

CdpBrowserProvider.ts

fix(runtime)!: preserve unknown debugger attachment state

2026-10-12 12:37:00 +08:00

CdpCaptureCompleteness.test.ts

refactor(test): keep coverage at behavioral boundaries (#474)

2026-08-11 18:34:32 +08:00

CdpCaptureCompleteness.ts

fix(browser): bound script metadata and preserve omissions

2026-10-09 06:32:10 +08:00

CdpCaptureContextRetention.test.ts

fix: bind identity and coverage to the producing rule (#1513)

2026-10-10 17:14:47 +08:00

CdpCaptureDocuments.baseUrl.test.ts

fix(browser): distinguish SVG links from HTML XLink attributes (#2480)

2026-10-13 21:23:33 +08:00

CdpCaptureDocuments.test.ts

test: prune redundant cases and promote configuration lifecycle coverage

2026-10-09 02:58:03 +08:00

CdpCaptureDocuments.ts

fix(browser): distinguish SVG links from HTML XLink attributes (#2480)

2026-10-13 21:23:33 +08:00

CdpCaptureDomSvg.ts

fix(browser): distinguish SVG links from HTML XLink attributes (#2480)

2026-10-13 21:23:33 +08:00

CdpCaptureEventBodyShapes.ts

fix(evidence): validate closure projections and browser body coverage

2026-10-12 08:59:14 +08:00

CdpCaptureEventHandlers.ts

fix(browser): preserve uncertainty in malformed network observations

2026-10-12 05:24:24 +08:00

CdpCaptureEventHelpers.ts

refactor(domain): extract source-map envelope walk and disambiguate stringValue (#828)

2026-10-07 11:23:37 +08:00

CdpCaptureEvents.redirectBodyShape.test.ts

fix(evidence): preserve literal keys and response body ownership

2026-10-12 16:17:29 +08:00

CdpCaptureEvents.ts

fix(evidence): preserve literal keys and response body ownership

2026-10-12 16:17:29 +08:00

CdpCaptureEventState.ts

fix(browser)!: preserve WebSocket connections and comparable payload coverage

2026-10-11 09:43:25 +08:00

CdpCaptureEventTypes.ts

fix: bind identity and coverage to the producing rule (#1513)

2026-10-10 17:14:47 +08:00

CdpCaptureStorage.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

CdpCaptureStorageFingerprints.ts

refactor: use canonical implementations and types directly

2026-10-09 23:35:19 +08:00

CdpCaptureValues.test.ts

refactor(tools): return complete analysis results inline

2026-09-29 14:53:50 +08:00

CdpCaptureValues.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

CdpCommandRejection.ts

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

CdpConnection.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

CdpElectronInspection.ts

fix(runtime)!: preserve unknown debugger attachment state

2026-10-12 12:37:00 +08:00

CdpElectronProvider.ts

fix(runtime)!: preserve unknown debugger attachment state

2026-10-12 12:37:00 +08:00

CdpElectronScriptEvents.ts

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

CdpElectronScripts.ts

fix: order remaining outputs independently of host locale (#1867)

2026-10-12 01:10:01 +08:00

CdpElectronWorkers.ts

fix(runtime)!: preserve unknown debugger attachment state

2026-10-12 12:37:00 +08:00

CdpEndpoint.ts

fix(browser): bound CDP discovery response size and lifetime

2026-10-13 07:52:54 +08:00

CdpObservationSession.ts

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

CdpOptionalCommand.ts

fix(browser): preserve command failures and reject malformed replies

2026-10-09 04:12:48 +08:00

CdpPageCapture.ts

fix(browser): distinguish SVG links from HTML XLink attributes (#2480)

2026-10-13 21:23:33 +08:00

CdpPageCaptureScripts.ts

fix: order remaining outputs independently of host locale (#1867)

2026-10-12 01:10:01 +08:00

CdpPageCaptureWorkers.ts

fix(runtime)!: preserve unknown debugger attachment state

2026-10-12 12:37:00 +08:00

CdpSafeMetadata.test.ts

fix(browser): keep malformed Content-Length declarations unknown (#2773)

2026-10-13 21:48:55 +08:00

CdpSafeMetadata.ts

fix(browser): keep malformed Content-Length declarations unknown (#2773)

2026-10-13 21:48:55 +08:00

CdpScreenshot.ts

fix(browser): compare PNG IHDR bytes without ASCII folding (#2099)

2026-10-13 06:16:18 +09:00

CdpTargetEvents.ts

feat(browser): attribute native execution and listener sources (#917)

2026-10-07 21:45:07 +08:00

CdpTargetSession.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

CdpWebMcpDiscovery.ts

fix: order remaining outputs independently of host locale (#1867)

2026-10-12 01:10:01 +08:00

ElectronFileScope.ts

fix(artifacts): admit bounded reads and preserve source identity

2026-10-11 00:03:18 +08:00

PlaywrightBrowserScenarioProvider.test.ts

fix(process): preserve monotonic capture timing and observed wall dates

2026-10-13 15:12:08 +08:00

PlaywrightBrowserScenarioProvider.ts

fix(browser): keep elapsed capture timing independent of wall-clock changes

2026-10-13 15:02:54 +08:00

PlaywrightElectronActiveActions.test.ts

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

PlaywrightElectronActiveActions.ts

fix(browser): keep elapsed capture timing independent of wall-clock changes

2026-10-13 15:02:54 +08:00

PlaywrightElectronActiveProjection.test.ts

fix(electron): bound hook retention and report dropped coverage

2026-10-09 05:15:23 +08:00

PlaywrightElectronActiveProjection.ts

fix(capture): retain Electron observations and HAR resource failures

2026-10-09 06:49:02 +08:00

PlaywrightElectronActiveProvider.test.ts

fix(electron): attribute unresolved paths to selected inputs

2026-10-13 04:12:40 +08:00

PlaywrightElectronActiveProvider.ts

fix(browser): keep elapsed capture timing independent of wall-clock changes

2026-10-13 15:02:54 +08:00

PlaywrightExecutionBoundary.test.ts

fix(browser): keep elapsed capture timing independent of wall-clock changes

2026-10-13 15:02:54 +08:00

PlaywrightExecutionBoundary.ts

fix(browser): keep elapsed capture timing independent of wall-clock changes

2026-10-13 15:02:54 +08:00

PlaywrightScenarioActions.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

PlaywrightScenarioArtifacts.test.ts

fix(browser): keep declared scenario secrets out of redacted evidence (#1590)

2026-10-11 06:22:57 +08:00

PlaywrightScenarioArtifacts.ts

fix(browser): keep declared scenario secrets out of redacted evidence (#1590)

2026-10-11 06:22:57 +08:00

PlaywrightScenarioBrowser.test.ts

fix(browser): support Termux Android scenarios (#1655)

2026-10-11 08:10:06 +08:00

PlaywrightScenarioBrowser.ts

perf(mcp): keep Playwright and type-only imports off MCP startup (#1691)

2026-10-10 21:04:05 -07:00

PlaywrightScenarioEvents.test.ts

fix(browser): redact encoded declared secrets consistently

2026-10-13 07:52:55 +08:00

PlaywrightScenarioEvents.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

PlaywrightScenarioSession.test.ts

fix(browser): preserve attached service-worker policies and ownership

2026-10-13 03:29:28 +08:00

PlaywrightScenarioSession.ts

fix(browser): keep elapsed capture timing independent of wall-clock changes

2026-10-13 15:02:54 +08:00

PlaywrightScenarioStorage.test.ts

fix(browser): seed storage by browser partition

2026-10-11 10:17:53 +08:00

PlaywrightScenarioStorage.ts

fix(browser): seed storage by browser partition

2026-10-11 10:17:53 +08:00

PngVisualDiff.test.ts

fix(browser): bound screenshot comparison memory

2026-10-11 11:11:38 +08:00

PngVisualDiff.ts

fix(browser): bound screenshot comparison memory

2026-10-11 11:11:38 +08:00

providerIdentities.ts

refactor: give Inspector its own capability directory (#869)

2026-10-07 13:53:25 +08:00

WebSourceMapFetcher.ts

fix(browser): keep elapsed capture timing independent of wall-clock changes

2026-10-13 15:02:54 +08:00