fix(trace-viewer): validate origin of postMessage trace blob

[pavelfeldman]

No description provided.

[github-actions]

Test results for "MCP"

78 failed
❌ [chrome] › mcp/cli-session.spec.ts:34 › close @mcp-windows-latest-chrome
❌ [chrome] › mcp/cli-session.spec.ts:44 › close named session @mcp-windows-latest-chrome
❌ [chrome] › mcp/cli-session.spec.ts:56 › close-all @mcp-windows-latest-chrome
❌ [chrome] › mcp/cli-session.spec.ts:70 › delete-data @mcp-windows-latest-chrome
❌ [chrome] › mcp/cli-session.spec.ts:82 › delete-data named session @mcp-windows-latest-chrome
❌ [chrome] › mcp/cli-session.spec.ts:99 › session stops when browser exits @mcp-windows-latest-chrome
❌ [chrome] › mcp/cli-session.spec.ts:113 › session reopen with different config @mcp-windows-latest-chrome
❌ [chrome] › mcp/cli-session.spec.ts:130 › workspace isolation - sessions in different workspaces are isolated @mcp-windows-latest-chrome
❌ [chrome] › mcp/cli-session.spec.ts:162 › list --all lists sessions from all workspaces @mcp-windows-latest-chrome
❌ [chrome] › mcp/dashboard.spec.ts:124 › daemon show: closing page exits the process @mcp-windows-latest-chrome
❌ [chrome] › mcp/dashboard.spec.ts:164 › should capture annotations via show --annotate @mcp-windows-latest-chrome
❌ [chrome] › mcp/dashboard.spec.ts:184 › should start dashboard and annotate when no dashboard is running @mcp-windows-latest-chrome
❌ [chrome] › mcp/dashboard.spec.ts:206 › should enter annotate mode on fresh dashboard.tsx mount with -s --annotate @mcp-windows-latest-chrome
❌ [chrome] › mcp/dashboard.spec.ts:230 › should annotate via direct browser_annotate MCP call @mcp-windows-latest-chrome
❌ [chrome] › mcp/dashboard.spec.ts:259 › should cancel browser_annotate when the MCP request is aborted @mcp-windows-latest-chrome
❌ [chrome] › mcp/dashboard.spec.ts:286 › should cancel browser_annotate when the MCP client disconnects @mcp-windows-latest-chrome
❌ [chrome] › mcp/dashboard.spec.ts:311 › should switch screencast to -s session on show --annotate @mcp-windows-latest-chrome
❌ [chrome] › mcp/dashboard.spec.ts:359 › should disengage annotate mode when --annotate client disconnects @mcp-windows-latest-chrome
❌ [chrome] › mcp/dashboard.spec.ts:425 › save recording streams WebM bytes to the chosen file @mcp-windows-latest-chrome
❌ [chromium] › mcp/cli-session.spec.ts:34 › close @mcp-windows-latest-chromium
❌ [chromium] › mcp/cli-session.spec.ts:44 › close named session @mcp-windows-latest-chromium
❌ [chromium] › mcp/cli-session.spec.ts:56 › close-all @mcp-windows-latest-chromium
❌ [chromium] › mcp/cli-session.spec.ts:70 › delete-data @mcp-windows-latest-chromium
❌ [chromium] › mcp/cli-session.spec.ts:82 › delete-data named session @mcp-windows-latest-chromium
❌ [chromium] › mcp/cli-session.spec.ts:99 › session stops when browser exits @mcp-windows-latest-chromium
❌ [chromium] › mcp/cli-session.spec.ts:113 › session reopen with different config @mcp-windows-latest-chromium
❌ [chromium] › mcp/cli-session.spec.ts:130 › workspace isolation - sessions in different workspaces are isolated @mcp-windows-latest-chromium
❌ [chromium] › mcp/cli-session.spec.ts:162 › list --all lists sessions from all workspaces @mcp-windows-latest-chromium
❌ [chromium] › mcp/dashboard.spec.ts:124 › daemon show: closing page exits the process @mcp-windows-latest-chromium
❌ [chromium] › mcp/dashboard.spec.ts:164 › should capture annotations via show --annotate @mcp-windows-latest-chromium
❌ [chromium] › mcp/dashboard.spec.ts:184 › should start dashboard and annotate when no dashboard is running @mcp-windows-latest-chromium
❌ [chromium] › mcp/dashboard.spec.ts:206 › should enter annotate mode on fresh dashboard.tsx mount with -s --annotate @mcp-windows-latest-chromium
❌ [chromium] › mcp/dashboard.spec.ts:230 › should annotate via direct browser_annotate MCP call @mcp-windows-latest-chromium
❌ [chromium] › mcp/dashboard.spec.ts:259 › should cancel browser_annotate when the MCP request is aborted @mcp-windows-latest-chromium
❌ [chromium] › mcp/dashboard.spec.ts:286 › should cancel browser_annotate when the MCP client disconnects @mcp-windows-latest-chromium
❌ [chromium] › mcp/dashboard.spec.ts:311 › should switch screencast to -s session on show --annotate @mcp-windows-latest-chromium
❌ [chromium] › mcp/dashboard.spec.ts:359 › should disengage annotate mode when --annotate client disconnects @mcp-windows-latest-chromium
❌ [chromium] › mcp/dashboard.spec.ts:425 › save recording streams WebM bytes to the chosen file @mcp-windows-latest-chromium
❌ [firefox] › mcp/cli-session.spec.ts:113 › session reopen with different config @mcp-windows-latest-firefox
❌ [firefox] › mcp/dashboard.spec.ts:124 › daemon show: closing page exits the process @mcp-windows-latest-firefox
❌ [firefox] › mcp/dashboard.spec.ts:164 › should capture annotations via show --annotate @mcp-windows-latest-firefox
❌ [firefox] › mcp/dashboard.spec.ts:184 › should start dashboard and annotate when no dashboard is running @mcp-windows-latest-firefox
❌ [firefox] › mcp/dashboard.spec.ts:206 › should enter annotate mode on fresh dashboard.tsx mount with -s --annotate @mcp-windows-latest-firefox
❌ [firefox] › mcp/dashboard.spec.ts:230 › should annotate via direct browser_annotate MCP call @mcp-windows-latest-firefox
❌ [firefox] › mcp/dashboard.spec.ts:259 › should cancel browser_annotate when the MCP request is aborted @mcp-windows-latest-firefox
❌ [firefox] › mcp/dashboard.spec.ts:286 › should cancel browser_annotate when the MCP client disconnects @mcp-windows-latest-firefox
❌ [firefox] › mcp/dashboard.spec.ts:311 › should switch screencast to -s session on show --annotate @mcp-windows-latest-firefox
❌ [firefox] › mcp/dashboard.spec.ts:359 › should disengage annotate mode when --annotate client disconnects @mcp-windows-latest-firefox
❌ [firefox] › mcp/dashboard.spec.ts:425 › save recording streams WebM bytes to the chosen file @mcp-windows-latest-firefox
❌ [msedge] › mcp/cli-session.spec.ts:34 › close @mcp-windows-latest-msedge
❌ [msedge] › mcp/cli-session.spec.ts:44 › close named session @mcp-windows-latest-msedge
❌ [msedge] › mcp/cli-session.spec.ts:56 › close-all @mcp-windows-latest-msedge
❌ [msedge] › mcp/cli-session.spec.ts:70 › delete-data @mcp-windows-latest-msedge
❌ [msedge] › mcp/cli-session.spec.ts:82 › delete-data named session @mcp-windows-latest-msedge
❌ [msedge] › mcp/cli-session.spec.ts:99 › session stops when browser exits @mcp-windows-latest-msedge
❌ [msedge] › mcp/cli-session.spec.ts:113 › session reopen with different config @mcp-windows-latest-msedge
❌ [msedge] › mcp/cli-session.spec.ts:130 › workspace isolation - sessions in different workspaces are isolated @mcp-windows-latest-msedge
❌ [msedge] › mcp/cli-session.spec.ts:162 › list --all lists sessions from all workspaces @mcp-windows-latest-msedge
❌ [msedge] › mcp/dashboard.spec.ts:124 › daemon show: closing page exits the process @mcp-windows-latest-msedge
❌ [msedge] › mcp/dashboard.spec.ts:164 › should capture annotations via show --annotate @mcp-windows-latest-msedge
❌ [msedge] › mcp/dashboard.spec.ts:184 › should start dashboard and annotate when no dashboard is running @mcp-windows-latest-msedge
❌ [msedge] › mcp/dashboard.spec.ts:206 › should enter annotate mode on fresh dashboard.tsx mount with -s --annotate @mcp-windows-latest-msedge
❌ [msedge] › mcp/dashboard.spec.ts:230 › should annotate via direct browser_annotate MCP call @mcp-windows-latest-msedge
❌ [msedge] › mcp/dashboard.spec.ts:259 › should cancel browser_annotate when the MCP request is aborted @mcp-windows-latest-msedge
❌ [msedge] › mcp/dashboard.spec.ts:286 › should cancel browser_annotate when the MCP client disconnects @mcp-windows-latest-msedge
❌ [msedge] › mcp/dashboard.spec.ts:311 › should switch screencast to -s session on show --annotate @mcp-windows-latest-msedge
❌ [msedge] › mcp/dashboard.spec.ts:359 › should disengage annotate mode when --annotate client disconnects @mcp-windows-latest-msedge
❌ [msedge] › mcp/dashboard.spec.ts:425 › save recording streams WebM bytes to the chosen file @mcp-windows-latest-msedge
❌ [webkit] › mcp/dashboard.spec.ts:124 › daemon show: closing page exits the process @mcp-windows-latest-webkit
❌ [webkit] › mcp/dashboard.spec.ts:164 › should capture annotations via show --annotate @mcp-windows-latest-webkit
❌ [webkit] › mcp/dashboard.spec.ts:184 › should start dashboard and annotate when no dashboard is running @mcp-windows-latest-webkit
❌ [webkit] › mcp/dashboard.spec.ts:206 › should enter annotate mode on fresh dashboard.tsx mount with -s --annotate @mcp-windows-latest-webkit
❌ [webkit] › mcp/dashboard.spec.ts:230 › should annotate via direct browser_annotate MCP call @mcp-windows-latest-webkit
❌ [webkit] › mcp/dashboard.spec.ts:259 › should cancel browser_annotate when the MCP request is aborted @mcp-windows-latest-webkit
❌ [webkit] › mcp/dashboard.spec.ts:286 › should cancel browser_annotate when the MCP client disconnects @mcp-windows-latest-webkit
❌ [webkit] › mcp/dashboard.spec.ts:311 › should switch screencast to -s session on show --annotate @mcp-windows-latest-webkit
❌ [webkit] › mcp/dashboard.spec.ts:359 › should disengage annotate mode when --annotate client disconnects @mcp-windows-latest-webkit
❌ [webkit] › mcp/dashboard.spec.ts:425 › save recording streams WebM bytes to the chosen file @mcp-windows-latest-webkit

6769 passed, 927 skipped

---

Merge workflow run.

[github-actions]

Test results for "tests 1"

7 flaky

⚠️ [chromium-library] › library/popup.spec.ts:261 › should not throw when click closes popup `@chromium-ubuntu-22.04-arm-node20`
⚠️ [chromium-library] › library/video.spec.ts:719 › screencast › should work with video+trace `@chromium-ubuntu-22.04-node24`
⚠️ [chromium-library] › library/popup.spec.ts:261 › should not throw when click closes popup `@chromium-ubuntu-22.04-node20`
⚠️ [chromium-library] › library/video.spec.ts:275 › screencast › should capture navigation `@chromium-ubuntu-22.04-node20`
⚠️ [chromium-library] › library/video.spec.ts:719 › screencast › should work with video+trace `@chromium-ubuntu-22.04-node22`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1080 › cli codegen › should not throw csp directive violation errors `@firefox-ubuntu-22.04-node20`
⚠️ [firefox-page] › page/page-wait-for-function.spec.ts:104 › should work with strict CSP policy `@firefox-ubuntu-22.04-node20`

40796 passed, 780 skipped

---

Merge workflow run.