Garry Tan 5645839186 security: path traversal prevention for screenshot/pdf/eval (PR #26) ...

Add validateOutputPath() for screenshot/pdf/responsive (restricts to
/tmp and cwd) and validateReadPath() for eval (blocks .. sequences and
absolute paths outside safe dirs). 7 new tests.

Credit: Jah-yee (PR #26)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-12 20:28:54 -07:00

..

browser-manager.ts

feat: wire cookie-import-browser into browse server

2026-03-12 18:27:33 -07:00

buffers.ts

Phase 2: Enhanced browser — dialog handling, upload, state checks, snapshots

2026-03-12 13:33:43 -07:00

cli.ts

feat: wire cookie-import-browser into browse server

2026-03-12 18:27:33 -07:00

cookie-import-browser.ts

feat: cookie-import-browser — Chromium cookie decryption module + tests

2026-03-12 18:27:22 -07:00

cookie-picker-routes.ts

feat: cookie picker web UI + route handler

2026-03-12 18:27:27 -07:00

cookie-picker-ui.ts

feat: cookie picker web UI + route handler

2026-03-12 18:27:27 -07:00

meta-commands.ts

security: path traversal prevention for screenshot/pdf/eval (PR #26)

2026-03-12 20:28:54 -07:00

read-commands.ts

security: redact sensitive values from command output (PR #21)

2026-03-12 20:28:48 -07:00

server.ts

feat: wire cookie-import-browser into browse server

2026-03-12 18:27:33 -07:00

snapshot.ts

Phase 2: Enhanced browser — dialog handling, upload, state checks, snapshots

2026-03-12 13:33:43 -07:00

write-commands.ts

security: redact sensitive values from command output (PR #21)

2026-03-12 20:28:48 -07:00