sz-chrome-remote-extension.git/broker/upload-guard.mjs, branch master pi-chrome, patched to drive a signed-in browser on another host through a broker, with an MCP server https://git.soarez.net/sz/sz-chrome-remote-extension.git/atom?h=master 2026-11-06T09:20:16+00:00 broker: refuse uploads from outside the staging directory 2026-11-06T09:20:16+00:00 Igor Soarez igor@soarez.org 2026-11-06T09:20:16+00:00 urn:sha1:85b49885256464b735923eaa771044706383718f page.upload and a raw DOM.setFileInputFiles through cdp.call now have to name files whose real path is under /tmp/pi-chrome-uploads (PI_CHROME_UPLOAD_DIR), on the broker's host. Anyone holding the token could otherwise attach any file the user can read to a page.