Skip to content

v0.0.148

Choose a tag to compare

@mbakgun mbakgun released this 06 Nov 17:06
· 28 commits to main since this release
57cad41

What's Changed

Security

Playwright navigate steps and AI steps now open only http and https URLs, so a workflow can no longer read backend files through file:// or similar schemes. The check runs right before each page load, so templated and AI-chosen URLs are covered, and schemeless localhost URLs work as before. Thanks to @amasolov for reporting it and contributing the fix (GHSA-hmfh-wpg2-vff4).

Full Changelog: v0.0.147...v0.0.148