82 Commits

Include renames

Author	SHA1	Message	Date
gensokyo-dev	50b2ab137f	fix(browser): preserve DOM length units in captures and comparisons (#7971) ... * fix(browser): declare DOM node value length units * fix(browser): preserve unknown DOM length comparisons	2026-10-29 11:27:01 +08:00
gensokyo-dev	4b0ff68e2e	fix(browser): retain prior-hop response facts in session timelines (#7807) ... * fix(browser): retain prior-hop response facts in session timelines * fix(browser): share response URL classification * fix(browser): preserve malformed response status failures * fix(browser): account for filtered redirect response coverage * test(browser): supply prior response URLs in redirect fixtures * fix(browser): retain malformed orphan response status coverage	2026-10-29 02:04:15 +08:00
Dragolone	6fd5d347c7	fix(browser): ignore repeated CSP directives within one policy (#7798) ... CSP3 parsing keeps the first directive of each name in a policy and ignores later repeats; Chrome reports "Ignoring duplicate Content-Security-Policy directive". parseCsp flattened every policy's directives into one stream, so a header such as `script-src 'self'; script-src 'unsafe-inline'` reported the ignored `'unsafe-inline'` directive as declared and counted nonces and hashes from it. Track directive names per policy so only the effective directive is retained, while the same name in separate comma-separated or repeated-field policies is still listed once per policy.	2026-10-28 22:23:00 +08:00