Garry Tan fc04321bff fix: sidebar prompt injection defense — XML framing, command allowlist, arg plumbing ...

Three security fixes for the Chrome sidebar:

1. XML-framed prompts with trust boundaries and escape of < > & in user
   messages to prevent tag injection attacks.

2. Bash command allowlist in system prompt — only browse binary commands
   ($B goto, $B click, etc.) allowed. All other bash commands forbidden.

3. Fix sidebar-agent.ts ignoring queued args — server-side --model and
   --allowedTools changes were silently dropped because the agent rebuilt
   args from scratch instead of using the queue entry.

Also defaults sidebar to Opus (harder to manipulate).

12 new tests covering XML escaping, command allowlist, Opus default,
trust boundary instructions, and arg plumbing.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-28 18:20:40 -07:00

..

fixtures

feat: headed mode + sidebar agent + Chrome extension (v0.12.0) (#517)

2026-03-26 11:15:24 -06:00

activity.test.ts

feat: headed mode + sidebar agent + Chrome extension (v0.12.0) (#517)

2026-03-26 11:15:24 -06:00

adversarial-security.test.ts

fix: security audit remediation — 12 fixes, 20 tests (v0.13.1.0) (#595)

2026-03-28 08:35:24 -06:00

browser-manager-unit.test.ts

feat: headed mode + sidebar agent + Chrome extension (v0.12.0) (#517)

2026-03-26 11:15:24 -06:00

bun-polyfill.test.ts

fix: Windows support — Node.js server fallback for Playwright (#255)

2026-03-20 12:22:11 -07:00

commands.test.ts

fix: security audit remediation — 12 fixes, 20 tests (v0.13.1.0) (#595)

2026-03-28 08:35:24 -06:00

compare-board.test.ts

feat: design binary — real UI mockup generation for gstack skills (v0.13.0.0) (#551)

2026-03-27 20:32:59 -06:00

config.test.ts

fix: Windows browse — health-check-first ensureServer, detached startServer, Windows process mgmt (v0.11.11.0) (#431)

2026-03-24 00:38:10 -07:00

cookie-import-browser.test.ts

feat: Wave 3 — community bug fixes & platform support (v0.11.6.0) (#359)

2026-03-23 22:15:23 -07:00

cookie-picker-routes.test.ts

fix: security audit remediation — 12 fixes, 20 tests (v0.13.1.0) (#595)

2026-03-28 08:35:24 -06:00

file-drop.test.ts

feat: headed mode + sidebar agent + Chrome extension (v0.12.0) (#517)

2026-03-26 11:15:24 -06:00

find-browse.test.ts

feat: multi-agent support — gstack works on Codex, Gemini CLI, and Cursor (v0.9.0) (#226)

2026-03-19 18:20:50 -07:00

findport.test.ts

feat: community PRs — faster install, skill namespacing, uninstall, Codex fallback, Windows fix, Python patterns (v0.12.9.0) (#561)

2026-03-27 00:44:37 -06:00

gstack-config.test.ts

fix: security audit remediation — 12 fixes, 20 tests (v0.13.1.0) (#595)

2026-03-28 08:35:24 -06:00

gstack-update-check.test.ts

fix: community PRs + security hardening + E2E stability (v0.12.7.0) (#552)

2026-03-26 23:21:27 -06:00

handoff.test.ts

feat: browse handoff — headless-to-headed browser switching (v0.7.4) (#201)

2026-03-19 00:38:58 -05:00

path-validation.test.ts

fix: security audit remediation — 12 fixes, 20 tests (v0.13.1.0) (#595)

2026-03-28 08:35:24 -06:00

platform.test.ts

fix: Windows support — Node.js server fallback for Playwright (#255)

2026-03-20 12:22:11 -07:00

server-auth.test.ts

fix: security audit remediation — 12 fixes, 20 tests (v0.13.1.0) (#595)

2026-03-28 08:35:24 -06:00

sidebar-agent-roundtrip.test.ts

fix: sidebar agent uses real tab URL instead of stale Playwright URL (v0.12.6.0) (#544)

2026-03-26 22:07:03 -06:00

sidebar-agent.test.ts

feat: headed mode + sidebar agent + Chrome extension (v0.12.0) (#517)

2026-03-26 11:15:24 -06:00

sidebar-integration.test.ts

fix: sidebar agent uses real tab URL instead of stale Playwright URL (v0.12.6.0) (#544)

2026-03-26 22:07:03 -06:00

sidebar-security.test.ts

fix: sidebar prompt injection defense — XML framing, command allowlist, arg plumbing

2026-03-28 18:20:40 -07:00

sidebar-unit.test.ts

fix: sidebar agent uses real tab URL instead of stale Playwright URL (v0.12.6.0) (#544)

2026-03-26 22:07:03 -06:00

snapshot.test.ts

feat: QA restructure, browser ref staleness, eval efficiency metrics (v0.4.0) (#83)

2026-03-15 23:55:39 -05:00

state-ttl.test.ts

fix: security audit remediation — 12 fixes, 20 tests (v0.13.1.0) (#595)

2026-03-28 08:35:24 -06:00

test-server.ts

feat: Phase 3.5 — cookie import, QA testing, team retro (v0.3.1) (#29)

2026-03-13 00:31:41 -07:00

url-validation.test.ts

fix: community security + stability fixes (wave 1) (#325)

2026-03-22 13:19:10 -07:00

watch.test.ts

feat: headed mode + sidebar agent + Chrome extension (v0.12.0) (#517)

2026-03-26 11:15:24 -06:00