kshitijk4poor
37a1c75716
fix(browser): hardening — dead code, caching, scroll perf, security, thread safety
Salvaged from PR #7276 (hardening-only subset; excluded 6 new tools
and unrelated scope additions from the contributor's commit).
- Remove dead DEFAULT_SESSION_TIMEOUT and unregistered browser_close schema
- Fix _camofox_eval wrong call signatures (_ensure_tab, _post args)
- Cache _find_agent_browser, _get_command_timeout, _discover_homebrew_node_dirs
- Replace 5x subprocess scroll loop with single pixel-arg call
- URL-decode before secret exfiltration check (bypass prevention)
- Protect _recording_sessions with _cleanup_lock (thread safety)
- Return failure on empty stdout instead of silent success
- Structure-aware _truncate_snapshot (cut at line boundaries)
Follow-up improvements over contributor's original:
- Move _EMPTY_OK_COMMANDS to module-level frozenset (avoid per-call allocation)
- Fix list+tuple concat in _run_browser_command PATH construction
- Update test_browser_homebrew_paths.py for tuple returns and cache fixtures
Co-authored-by: kshitijk4poor <82637225+kshitijk4poor@users.noreply.github.com>
Closes #7168, closes #7171, closes #7172, closes #7173
2026-04-10 13:05:44 -07:00
..
2026-04-10 03:44:43 -07:00
2026-04-08 13:44:58 -07:00
2026-03-31 10:40:13 -07:00
2026-04-09 16:24:53 -07:00
2026-04-10 03:44:43 -07:00
2026-03-08 16:47:20 -07:00
2026-04-01 00:50:08 -07:00
2026-04-09 16:24:53 -07:00
2026-04-09 13:17:06 -07:00
2026-04-07 08:40:22 -04:00
2026-04-03 02:29:20 -07:00
2026-04-10 03:44:35 -07:00
2026-04-04 10:18:57 -07:00
2026-04-03 13:10:11 -07:00
2026-04-10 03:52:16 -07:00
2026-03-17 02:34:35 -07:00
2026-03-26 19:38:04 -07:00
2026-03-20 14:54:25 -07:00
2026-03-27 07:49:44 -07:00
2026-03-17 02:02:57 -07:00
2026-03-16 19:01:39 +03:00
2026-04-10 03:44:43 -07:00
2026-04-08 21:37:51 -07:00
2026-04-08 17:23:15 -07:00
2026-03-16 23:39:41 -07:00
2026-04-09 16:24:53 -07:00
2026-03-31 03:10:01 -07:00
2026-03-23 15:40:42 -07:00
2026-04-09 13:17:06 -07:00
2026-02-26 13:30:55 +03:00