microlinkhq / browserless / 38539476882

77%

push

github

fix(function): pass the browser socket as an isolate egress exception (#994)

* fix(function): pass the browser socket as an isolate egress exception

The isolate refuses reserved addresses only when it is given an egress list.
The browser websocket is on loopback, so the run grants that exact ip:port
and nothing else.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix(function): keep an explicit default browser port in the egress list

new URL() drops port 80 on ws and 443 on wss, so those sockets were not granted. Read the port from the raw authority, and still skip an endpoint that names no port.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix(function): grant the browser socket inside the caller's dial policy

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix(function): match the browser grant to the port that is dialed

A default port written as 080 was granted as the raw token, so a dial on port 80 missed the exception. Canonicalize that number.

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>

2138 of 2423 branches covered (88.24%)

Branch coverage included in aggregate %.

45 of 47 new or added lines in 1 file covered. (95.74%)

7736 of 10330 relevant lines covered (74.89%)

58183.57 hits per line