fix(browser): enforce redirect-hop SSRF checks

2026-03-09 05:40:59 +00:00
parent 31402b8542
commit 93775ef6a4
9 changed files with 184 additions and 4 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,12 @@

 Docs: https://docs.openclaw.ai

+## Unreleased
+
+### Fixes
+
+- Browser/SSRF: block private-network intermediate redirect hops in strict browser navigation flows and fail closed when remote tab-open paths cannot inspect redirect chains. Thanks @zpbrent.
+
 ## 2026.3.8

 ### Changes