Security hardening for browser boundary, SSRF, FS bridge, profile isolation, exports, and tokens#1

Merged

openwong2kim merged 7 commits intoopenwong2kim:mainfrom

Zurgli:security-remediation-upstream

Apr 1, 2026

Commits on Apr 1, 2026

Harden browser RPC boundary

Zuka Margvelashvili
authored and
Zuka Margvelashvili
committed
Harden browser navigation SSRF checks

Zuka Margvelashvili
authored and
Zuka Margvelashvili
committed
Harden renderer filesystem bridge

Zuka Margvelashvili
authored and
Zuka Margvelashvili
committed
Wire real browser profile partitions

Zuka Margvelashvili
authored and
Zuka Margvelashvili
committed
Restrict browser export output paths

Zuka Margvelashvili
authored and
Zuka Margvelashvili
committed
Harden local auth token permissions

Zuka Margvelashvili
authored and
Zuka Margvelashvili
committed
Address PR review blocking security fixes

Zuka Margvelashvili
authored and
Zuka Margvelashvili
committed