| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 3 days | broker: refuse uploads from outside the staging directory | Igor Soarez | |
| page.upload and a raw DOM.setFileInputFiles through cdp.call now have to name files whose real path is under /tmp/pi-chrome-uploads (PI_CHROME_UPLOAD_DIR), on the broker's host. Anyone holding the token could otherwise attach any file the user can read to a page. | |||
 |
index : sz-chrome-remote-extension.git | |
| pi-chrome, patched to drive a signed-in browser on another host through a broker, with an MCP server |
| aboutsummaryrefslogtreecommitdiff |