diff --git a/browse/src/cdp-allowlist.ts b/browse/src/cdp-allowlist.ts index b9c3a9538..21a5bb621 100644 --- a/browse/src/cdp-allowlist.ts +++ b/browse/src/cdp-allowlist.ts @@ -199,6 +199,14 @@ export const CDP_ALLOWLIST: ReadonlyArray = Object.freeze([ output: 'untrusted', justification: 'Inspect properties of an existing remote object. Read-only; output may contain page data.', }, + // ─── Input (synthetic trusted user gestures) ─────────────── + { + domain: 'Input', + method: 'dispatchMouseEvent', + scope: 'tab', + output: 'trusted', + justification: 'Trusted mouse gesture for widgets that ignore JS clicks (e.g. Personio Gefahrtarifstelle "Monat auswählen" dropdown). Focused tab only; returns an ack, no page content.', + }, ]); const CDP_ALLOWLIST_INDEX: Map = new Map(