DongHyeonka and Claude Opus 5
ba79060a83
fix: execute canonical browser download targets
...
Replace the boolean browser-managed target validator with
resolveBrowserManagedTarget, which returns the parsed canonical absolute URL,
and hand that exact value to the host. Previously the raw href was passed on,
so a relative target was re-resolved against document.baseURI and a hostile
<base> could send the navigation to an origin the policy never approved.
STO-08 stays UNVERIFIED: the capability spec does not exercise the system
picker, so the receiver-binding hypothesis is neither reproduced nor refuted
and no source change was made for it.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com >
2026-08-13 23:23:46 +09:00
..
2026-08-13 16:02:21 +09:00
2026-07-30 15:58:20 +09:00
2026-08-01 19:39:59 +09:00
2026-07-30 15:58:20 +09:00
2026-08-01 19:39:59 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-08-02 08:43:44 +09:00
2026-07-30 15:58:20 +09:00
2026-08-13 23:23:46 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-08-13 16:02:21 +09:00
2026-07-30 15:58:20 +09:00
2026-08-01 19:39:59 +09:00
2026-07-30 15:58:20 +09:00
2026-08-13 16:02:21 +09:00
2026-08-01 19:39:59 +09:00
2026-08-13 16:02:21 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-08-01 19:39:59 +09:00
2026-08-01 19:39:59 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-08-01 23:59:11 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-08-13 23:01:48 +09:00
2026-08-02 11:36:27 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-08-01 19:39:59 +09:00
2026-08-02 04:46:33 +09:00
2026-08-02 07:11:33 +09:00
2026-07-30 15:58:20 +09:00
2026-08-01 23:17:09 +09:00
2026-08-13 23:21:58 +09:00
2026-08-13 23:21:58 +09:00
2026-08-02 03:15:22 +09:00
2026-08-01 19:39:59 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-08-13 16:02:21 +09:00
2026-08-13 16:02:21 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-08-01 23:59:11 +09:00
2026-07-30 15:58:20 +09:00
2026-08-01 19:39:59 +09:00
2026-07-30 15:58:20 +09:00
2026-08-02 00:28:17 +09:00
2026-08-02 05:26:36 +09:00
2026-08-02 04:03:14 +09:00
2026-08-02 15:02:57 +09:00
2026-08-02 05:26:36 +09:00
2026-07-30 15:58:20 +09:00
2026-08-01 19:39:59 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-08-02 09:10:35 +09:00
2026-08-02 10:12:34 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-08-13 23:05:43 +09:00
2026-08-01 19:39:59 +09:00
2026-08-13 16:02:21 +09:00
2026-08-01 19:39:59 +09:00
2026-08-01 19:39:59 +09:00
2026-08-01 19:39:59 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-08-13 16:02:21 +09:00
2026-07-30 15:58:20 +09:00
2026-08-01 23:17:09 +09:00
2026-08-13 16:02:21 +09:00
2026-08-13 23:05:43 +09:00
2026-07-26 13:41:23 +09:00
2026-07-30 15:58:20 +09:00
2026-08-02 10:12:34 +09:00
2026-08-13 16:02:21 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00
2026-08-01 19:39:59 +09:00
2026-07-30 15:58:20 +09:00
2026-07-30 15:58:20 +09:00