🔒 全面加固跨世界 GM RPC、用户脚本与 Agent 边界 - #1747

Draft

cyfung1031 wants to merge 108 commits into

scriptscat:mainfrom

cyfung1031:codex/main-world-security-refactor

Commits on Sep 16, 2026

🔒 harden MAIN-world GM RPC capability binding
cyfung1031
committed
c0444dc
🐛 allow async GM XHR page RPC alias
cyfung1031
committed
a6e69ed
🔒 harden userscript invocation against page substitution
cyfung1031
committed
ef945e8

Commits on Sep 17, 2026

🔒 isolate USER_SCRIPT GM transport and binding rotation
cyfung1031
committed
1eb1839
🐛 route USER_SCRIPT GM calls to service worker
cyfung1031
committed
3037623
🧹 format USER_SCRIPT transport regression test
cyfung1031
committed
25714ff
🔒 harden page and USER_SCRIPT execution bindings
cyfung1031
committed
a46b042
🔒 secure USER_SCRIPT bootstrap and page capability checks
cyfung1031
committed
d65bcf3
🐛 preserve GM API registry enumeration
cyfung1031
committed
e1ccf07
🐛 make GM API registry merge-compatible
cyfung1031
committed
9f98995
⚡ reduce native reflection overhead
cyfung1031
committed
9868594
⚡ reduce content callback overhead
cyfung1031
committed
f49053a
Merge remote-tracking branch 'origin/main' into codex/main-world-security-refactor
cyfung1031
committed
d56b7a8
⚡ avoid receiver binding for pure agent APIs
cyfung1031
committed
47c2704
⚡ capture native collection methods on subclasses
cyfung1031
committed
8bcad36
⚡ remove GM API receiver binding
cyfung1031
committed
f2aad91

Commits on Sep 18, 2026

⚡️ reduce runtime function overhead
cyfung1031
committed
f13f7e2
⚡️ remove redundant native collection factories
cyfung1031
committed
edc3ab3
⚡️ simplify native set initialization
cyfung1031
committed
b5007df
📄 补充跨世界安全边界维护注释
 cyfung1031
committed
4d194e1
🔒 separate asynchronous page RPC transport
cyfung1031
committed
9d0de58
🔒 hide GM broker state behind script facade
cyfung1031
committed
3448728
🔒 reject executable values at GM clone boundaries
cyfung1031
committed
6a014bf
🐛 settle GM XHR aborts without callbacks
cyfung1031
committed
eb66888
🐛 continue page script loading after early reconciliation
cyfung1031
committed
1d0dd85
🔒 clone DOM bridge payloads before validation
cyfung1031
committed
7780934
🔒 validate Blob page RPC payloads
cyfung1031
committed
2993bbc
🔒 reject executable GM values
cyfung1031
committed
9c0650d
🔒 reject non-cloneable GM values
cyfung1031
committed
398c884
🔒 harden page RPC intrinsic boundaries
cyfung1031
committed
06bbf29
🐛 preserve zero-valued tab identities
cyfung1031
committed
4a4a127
🐛 delete falsy GM values consistently
cyfung1031
committed
a5a9b84
🔒 avoid accessor execution in GM_setValues
cyfung1031
committed
340fea9
🔒 preserve none grant capability boundary
cyfung1031
committed
884642a
🔒 capture grant alias intrinsics
cyfung1031
committed
3d45436
🔒 isolate grant capability map lookups
cyfung1031
committed
764a550
🔒 harden capability collection construction
cyfung1031
committed
525b2ed
🔒 seal page RPC collection iteration
cyfung1031
committed
c37446a
🐛 honor early GM XHR aborts
cyfung1031
committed
18255a0
🐛 settle GM XHR connection failures
cyfung1031
committed
ad61560
🐛 settle GM XHR setup errors
cyfung1031
committed
68f4d3c
🔒 discard stale page load bindings
cyfung1031
committed
f4edd72
🔒 harden GM value transport collection writes
cyfung1031
committed
842d5ee
🔒 bind page execution handles to navigation URL
cyfung1031
committed
fa26a1b
🔒 hide CAT conversation state behind private fields
cyfung1031
committed
86193c0
🔒 close GM XHR connections on setup failure
cyfung1031
committed
0bc23a6
🔒 avoid accessor execution in GM DOM attributes
cyfung1031
committed
35b6766
🔒 copy GM menu options without accessors
cyfung1031
committed
cb49bf8
🔒 copy GM XHR headers without accessors
cyfung1031
committed
ef3adf5
🔒 copy GM tab options without accessors
cyfung1031
committed
5acba1b
🔒 copy notification details without accessors
cyfung1031
committed
13d6645
⚡️ reduce USER_SCRIPT callback dispatch scans
cyfung1031
committed
6bf76fd
🔒 prune revoked USER_SCRIPT connections
cyfung1031
committed
714008e
🔒 harden USER_SCRIPT reconnect sessions
cyfung1031
committed
63b01b3
🔒 validate inject page bootstrap DTOs
cyfung1031
committed
3a8c561
🔒 validate inject runtime callback DTOs
cyfung1031
committed
cf9ee7b
🔒 avoid duplicate USER_SCRIPT bootstrap execution
cyfung1031
committed
d2b2d84
🔒 route MAIN privileged traffic over native channel
cyfung1031
committed
a64a1cb
🔒 redact early-start preload values
cyfung1031
committed
281e449
🔒 settle XHR errors without broker loadend
cyfung1031
committed
50a08b2
🔒 isolate protected GM facade keys
cyfung1031
committed
b84ccaf
🔒 keep service worker bridge bundle DOM-free
cyfung1031
committed
cfb698c
🔒 validate USER_SCRIPT bridge DTOs
cyfung1031
committed
8df243d
🔒 bind CAT tasks to script owners
cyfung1031
committed
beb742c
🔒 bind CAT conversations to script owners
cyfung1031
committed
e2738c9
🔒 bind USER_SCRIPT tokens to page URLs
cyfung1031
committed
283edd2
🔒 bind early-start metadata to injected wrappers
cyfung1031
committed
c8516c9
🔒 restore early-start manifest execution
cyfung1031
committed
20d39af
🔒 retire stale page bindings on navigation
cyfung1031
committed
3372fbe
🔒 bind CAT agent service identities
cyfung1031
committed
f371261
🔒 target private callbacks to frame zero
cyfung1031
committed
3ab6b2d
🔒 bind DOM monitors to script owners
cyfung1031
committed
2f5b1fb
🔒 gate MAIN page bootstrap transport
cyfung1031
committed
1f769a6
🔒 preserve USER_SCRIPT native fallback
cyfung1031
committed
2f8dcd6
🔒 queue USER_SCRIPT value updates across reconnects
cyfung1031
committed
901016d
🔒 protect GM value stores from prototype keys
cyfung1031
committed
643af56
🔒 reject hostile page message envelopes
cyfung1031
committed
8f4cf28
🔒 validate sandbox message envelopes
cyfung1031
committed
5b25310
🔒 validate custom event envelopes
cyfung1031
committed
898fcc4
🔒 guard server action dispatch inputs
cyfung1031
committed
35ce581
🔒 inspect collection payload entries before cloning
cyfung1031
committed
276196c
🔒 validate collection RPC payloads without accessors
cyfung1031
committed
c783a7a
🔒 remove live document references from CAT fetch
cyfung1031
committed
671c445
🔒 bind early-start wrappers to document URLs
cyfung1031
committed
284b968
🔒 reject page RPC replay window overflow
cyfung1031
committed
3693b58
🔒 close service worker page RPC replay window
cyfung1031
committed
9cf16de
🔒 validate page RPC identity before replay state
cyfung1031
committed
9dd323e
🔒 harden GM value result records
cyfung1031
committed
2acb238
🔒 restrict script attachment reads
cyfung1031
committed
39b695d
🔒 keep MAIN script payload off page bridge
cyfung1031
committed
c46dfe1
🔒 isolate service worker value records
cyfung1031
committed
deea129
🔒 serialize CDP monitor transitions
cyfung1031
committed
71022c7
🔒 allow long-lived page RPC bindings
cyfung1031
committed
8528137
🔒 preserve early wrappers across same-document navigation
cyfung1031
committed
96c577c
🔒 require a native MAIN page-load handshake
cyfung1031
committed
6ee8ba4
✅ bound E2E waits and replay invariant tests
cyfung1031
committed
babadbc
🔧 restore PR E2E timeout settings
cyfung1031
committed
0541cdb
🔒 route MAIN bootstrap over extension transport
cyfung1031
committed
3217aca

Commits on Sep 19, 2026

🔒 restore MAIN bootstrap page load
cyfung1031
committed
dbad992
⚡️ 优化跨上下文消息解析热路径
 cyfung1031
committed
0057ee8
⚡️ 精简跨上下文消息体校验
 cyfung1031
committed
cf6cf21
⚡️ reuse PageMessage connection sender
cyfung1031
committed
2d8a75a
⚡️ 优化 structuredClone 调用
 cyfung1031
committed
5b07c7e
📚 更新 Agent 与消息传输架构文档
 cyfung1031
committed
dcd220c
📄 Pareto review tracked documentation
cyfung1031
committed
d9cb85c

Commits on Sep 20, 2026