2 Commits

Include renames

Author	SHA1	Message	Date
ciregenz	3ac55520d6	[eric] browser: the upload tool also finds inputs inside shadow roots and embedded frames, and a refused path names the exact staging copy that unblocks it (ENG-47)	2026-08-11 20:22:10 -07:00
ciregenz	ba97d141ee	[eric] browser: agents can attach a file to an upload field without the OS picker; the path is allow-listed backend-side so a hostile page cannot turn it into exfiltration (ENG-47)	2026-08-11 20:10:36 -07:00