fix(browser): unify SSRF guard path for navigation

2026-05-14 04:38:35 +00:00 · 2026-02-19 13:43:48 +01:00
parent 3c419b7bd3
commit 6195660b1a
15 changed files with 269 additions and 18 deletions
--- a/src/browser/routes/agent.snapshot.ts
+++ b/src/browser/routes/agent.snapshot.ts
@@ -65,10 +65,12 @@ export function registerBrowserAgentSnapshotRoutes(
      targetId,
      feature: "navigate",
      run: async ({ cdpUrl, tab, pw }) => {
+        const ssrfPolicy = ctx.state().resolved.ssrfPolicy;
        const result = await pw.navigateViaPlaywright({
          cdpUrl,
          targetId: tab.targetId,
          url,
+          ...(ssrfPolicy ? { ssrfPolicy } : {}),
        });
        res.json({ ok: true, targetId: tab.targetId, ...result });
      },