Integrated browser: assistant context does not leak secret-bearing URLs
Problem. Every assistant message includes the current page URL, even when browser access is paused. URLs often carry secrets (OAuth codes, reset tokens, signed links).
Fix. Send only origin and path, and only while access is allowed for that site.
Branch: feat/integrated-browser
Do you like what you are reading? Subscribe to receive updates.
Unsubscribe anytime
Powered by Seed HypermediaOpen App