gstack/browse
Philipp Desgranges 930fc54fb7 feat(browse): allowlist Input.dispatchMouseEvent for trusted mouse gestures
Some widgets only open on a genuine OS-level mouse event and ignore all
JS/synthetic clicks (verified on Personio's Gefahrtarifstelle "Monat
auswählen" dropdown, 2026-07-03). Add Input.dispatchMouseEvent to
CDP_ALLOWLIST (scope: tab, output: trusted) so `$B cdp` can force a real
click. Delivers input to the focused tab only; returns just an ack (no
page content), so no exfil/injection vector. cdp-allowlist.test.ts: 6 pass.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-03 12:21:31 +02:00
..
bin feat: multi-agent support — gstack works on Codex, Gemini CLI, and Cursor (v0.9.0) (#226) 2026-03-19 18:20:50 -07:00
scripts fix: ngrok Windows build + close CI error-swallowing gap (v0.18.0.1) (#1024) 2026-04-16 13:49:04 -07:00
src feat(browse): allowlist Input.dispatchMouseEvent for trusted mouse gestures 2026-07-03 12:21:31 +02:00
test v1.32.0.0 fix wave: 7 community PRs + 5 gate-eval hardenings (#1431) 2026-05-11 12:16:26 -07:00
PLAN-snapshot-dropdown-interactive.md fix: snapshot -i auto-detects dropdown/popover interactive elements (#845) 2026-04-05 22:57:45 -07:00
SKILL.md v1.31.0.0 fix: delete AskUserQuestion fallback (root cause of forever war) + harness primitives (#1390) 2026-05-09 17:01:13 -07:00
SKILL.md.tmpl v1.28.0.0 feat: browse --headed/--proxy/--navigate + gstack/llms.txt + webdriver-only stealth (#1363) 2026-05-07 20:14:59 -07:00