Garry Tan e2ab41502e fix: adversarial review fixes for ux-audit and heatmap ... Security: - Remove live form value extraction from ux-audit (leaked input field values) - Add ux-audit to PAGE_CONTENT_COMMANDS (untrusted content wrapping) Correctness: - Scope youAreHere selector to nav containers (was matching animation classes) - Validate heatmap JSON is a plain object (string/array/null produced garbage) - Use textContent instead of innerText for word count (avoids layout computation) - Remove dead url variable and unused LINK_CAP constant Found by Codex + Claude adversarial review. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-04-14 09:08:57 -07:00
..
activity.ts	feat: content security — 4-layer prompt injection defense for pair-agent (#815)	2026-04-06 14:41:06 -07:00
audit.ts	fix: security wave 3 — 12 fixes, 7 contributors (v0.16.4.0) (#988)	2026-04-13 07:49:37 -10:00
browser-manager.ts	fix: security wave 3 — 12 fixes, 7 contributors (v0.16.4.0) (#988)	2026-04-13 07:49:37 -10:00
buffers.ts	…
bun-polyfill.cjs	fix: Windows support — Node.js server fallback for Playwright (#255)	2026-03-20 12:22:11 -07:00
cdp-inspector.ts	refactor: AI slop reduction with cross-model quality review (v0.16.3.0) (#941)	2026-04-10 17:13:15 -10:00
cli.ts	refactor: AI slop reduction with cross-model quality review (v0.16.3.0) (#941)	2026-04-10 17:13:15 -10:00
commands.ts	fix: adversarial review fixes for ux-audit and heatmap	2026-04-14 09:08:57 -07:00
config.ts	fix: security wave 3 — 12 fixes, 7 contributors (v0.16.4.0) (#988)	2026-04-13 07:49:37 -10:00
content-security.ts	refactor: AI slop reduction with cross-model quality review (v0.16.3.0) (#941)	2026-04-10 17:13:15 -10:00
cookie-import-browser.ts	fix: security wave 3 — 12 fixes, 7 contributors (v0.16.4.0) (#988)	2026-04-13 07:49:37 -10:00
cookie-picker-routes.ts	fix: cookie picker auth token leak (v0.15.17.0) (#904)	2026-04-08 10:10:13 -07:00
cookie-picker-ui.ts	fix: cookie picker auth token leak (v0.15.17.0) (#904)	2026-04-08 10:10:13 -07:00
error-handling.ts	refactor: AI slop reduction with cross-model quality review (v0.16.3.0) (#941)	2026-04-10 17:13:15 -10:00
find-browse.ts	feat: multi-agent support — gstack works on Codex, Gemini CLI, and Cursor (v0.9.0) (#226)	2026-03-19 18:20:50 -07:00
media-extract.ts	feat: browser data platform for AI agents (v0.16.0.0) (#907)	2026-04-08 00:41:55 -07:00
meta-commands.ts	fix: adversarial review fixes for ux-audit and heatmap	2026-04-14 09:08:57 -07:00
network-capture.ts	feat: browser data platform for AI agents (v0.16.0.0) (#907)	2026-04-08 00:41:55 -07:00
path-security.ts	fix: security wave 3 — 12 fixes, 7 contributors (v0.16.4.0) (#988)	2026-04-13 07:49:37 -10:00
platform.ts	fix: Windows support — Node.js server fallback for Playwright (#255)	2026-03-20 12:22:11 -07:00
read-commands.ts	fix: security wave 3 — 12 fixes, 7 contributors (v0.16.4.0) (#988)	2026-04-13 07:49:37 -10:00
server.ts	fix: security wave 3 — 12 fixes, 7 contributors (v0.16.4.0) (#988)	2026-04-13 07:49:37 -10:00
sidebar-agent.ts	refactor: AI slop reduction with cross-model quality review (v0.16.3.0) (#941)	2026-04-10 17:13:15 -10:00
sidebar-utils.ts	fix: sidebar agent uses real tab URL instead of stale Playwright URL (v0.12.6.0) (#544)	2026-03-26 22:07:03 -06:00
snapshot.ts	fix: adversarial review fixes for ux-audit and heatmap	2026-04-14 09:08:57 -07:00
tab-session.ts	refactor: extract TabSession for per-tab state isolation (v0.15.16.0) (#873)	2026-04-07 00:23:36 -07:00
token-registry.ts	feat: browser data platform for AI agents (v0.16.0.0) (#907)	2026-04-08 00:41:55 -07:00
url-validation.ts	fix: security wave 3 — 12 fixes, 7 contributors (v0.16.4.0) (#988)	2026-04-13 07:49:37 -10:00
welcome.html	feat: GStack Browser — double-click AI browser with anti-bot stealth (#695)	2026-04-04 10:17:05 -07:00
write-commands.ts	fix: security wave 3 — 12 fixes, 7 contributors (v0.16.4.0) (#988)	2026-04-13 07:49:37 -10:00