Garry Tan 5184ea677b feat: add content-security.ts with datamarking, envelope, and filter hooks ... Four-layer prompt injection defense for pair-agent browser sharing: - Datamarking: session-scoped watermark for text exfiltration detection - Content envelope: trust boundary wrapping with ZWSP marker escaping - Content filter hooks: extensible filter pipeline with warn/block modes - Built-in URL blocklist: requestbin, pipedream, webhook.site, etc. BROWSE_CONTENT_FILTER env var controls mode: off|warn|block (default: warn) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-04-05 11:05:38 -07:00
..
bin	feat: multi-agent support — gstack works on Codex, Gemini CLI, and Cursor (v0.9.0) (#226)	2026-03-19 18:20:50 -07:00
scripts	fix: Windows support — Node.js server fallback for Playwright (#255)	2026-03-20 12:22:11 -07:00
src	feat: add content-security.ts with datamarking, envelope, and filter hooks	2026-04-05 11:05:38 -07:00
test	refactor: split handleCommand into handleCommandInternal + HTTP wrapper	2026-04-05 11:05:11 -07:00
SKILL.md	feat: interactive /plan-devex-review + plan mode skill fix (v0.15.5.0) (#796)	2026-04-04 14:36:23 -07:00
SKILL.md.tmpl	feat: sidebar CSS inspector + per-tab agents (v0.13.9.0) (#650)	2026-03-30 12:51:05 -06:00