Agent-browser-shield

v2026.6.10.27 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 1mo Secrets & Credentials

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents browser-extension browser-use security

Summary

AI summary

Refactored architecture, added greyed toolbar icon with "off" badge and tab-scoped recovery pause, fixed leet detector false positives and infinite rebuild loop.

Changes in this release

Type	Severity	Summary	CVE
Feature	Low	Adds greyed toolbar icon with "off" badge when enforcement is paused. Adds greyed toolbar icon with "off" badge when enforcement is paused. Source: llm_adapter@2026-06-10 Confidence: high	—
Feature	Low	Adds tab‑scoped recovery pause via unified popup off‑switch card. Adds tab‑scoped recovery pause via unified popup off‑switch card. Source: llm_adapter@2026-06-10 Confidence: high	—
Bugfix	Medium	Fixes leet detector false positives on prose containing version numbers. Fixes leet detector false positives on prose containing version numbers. Source: llm_adapter@2026-06-10 Confidence: high	—
Bugfix	Medium	Fixes infinite rebuild loop caused by `bun run watch` codegen self‑trigger. Fixes infinite rebuild loop caused by `bun run watch` codegen self‑trigger. Source: llm_adapter@2026-06-10 Confidence: high	—
Refactor
Refactor	Low	Collapses 4× page-world injection boilerplate into a hook factory. Collapses 4× page-world injection boilerplate into a hook factory. Source: granite4.1:30b@2026-06-10-audit Confidence: low	—
Refactor	Low	Introduces typed message router (webext-messenger) with Zod validation at the page→worker boundary. Introduces typed message router (webext-messenger) with Zod validation at the page→worker boundary. Source: granite4.1:30b@2026-06-10-audit Confidence: low	—
Refactor	Low	Splits background worker by concern: tracker, router, lifecycle, and badge. Splits background worker by concern: tracker, router, lifecycle, and badge. Source: granite4.1:30b@2026-06-10-audit Confidence: low	—

Full changelog

What's Changed

Add: greyed toolbar icon + "off" badge when enforcement is paused (spec 0010 FR-2a) by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/236
Fix: leet detector firing on prose with version numbers (encoded-payload FP) by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/238
Add: tab-scoped recovery pause, in one unified popup off-switch card (spec 0010 FR-7e–h, ADR-0018/0019) by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/237
Refactor: collapse 4× page-world injection boilerplate into a hook factory by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/239
Fix: stop bun run watch infinite rebuild loop (codegen self-trigger) by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/240
Refactor: typed message router (webext-messenger) + zod validation at the page→worker boundary by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/241
Refactor: split background worker by concern (tracker / router / lifecycle / badge) by @twschiller in https://github.com/pixiebrix/agent-browser-shield/pull/242

Full Changelog: https://github.com/pixiebrix/agent-browser-shield/compare/v2026.6.9.26...v2026.6.10.27

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Agent-browser-shield

Get notified when new releases ship.

About Agent-browser-shield

All releases →

Related context

Related tools

Earlier breaking changes

v2026.6.2.13 Enforce lib/↔rules/ import boundary via no-restricted-paths