Commit Graph

8309 Commits

Author SHA1 Message Date
Muki Kiboigo
234e7bded0 properly dupe authored header names 2026-07-24 07:20:18 -07:00
Muki Kiboigo
235f9ea613 ensure we properly parse access-origin 2026-07-24 07:01:02 -07:00
Muki Kiboigo
e1c89c8a57 move checks into needsPreflight 2026-07-24 07:01:02 -07:00
Muki Kiboigo
7460364313 more correct Cors checking implementation 2026-07-24 07:01:02 -07:00
Muki Kiboigo
92f2646d9b remove cors req from single flight on transfer deinit 2026-07-24 07:01:02 -07:00
Muki Kiboigo
84065f14a5 partially functional Cors impl 2026-07-24 07:01:01 -07:00
Muki Kiboigo
52033cffed add CorsGate 2026-07-24 07:01:01 -07:00
Muki Kiboigo
d4d8381ecb add isSameOrigin to URL 2026-07-24 07:01:01 -07:00
Muki Kiboigo
3e3825108d seperate SingleFlight from RobotsGate 2026-07-24 07:01:01 -07:00
Karl Seguin
044d5c9186 Merge pull request #3047 from lightpanda-io/parse-terminate-guard
stability: Poll terminate state during large HTML parsing
2026-07-24 21:36:40 +08:00
Karl Seguin
3364de74af Merge pull request #3045 from lightpanda-io/notificaiton-reregister-safe
cdp: ignore duplicate enable calls
2026-07-24 19:24:32 +08:00
Karl Seguin
0066cad4d9 Merge pull request #3041 from lightpanda-io/runner-tick-preload
perf, fix: Avoid tight tick loop before page loads
2026-07-24 17:28:16 +08:00
Karl Seguin
553a3bad08 Merge pull request #3046 from lightpanda-io/resize-observer-perf
perf: improve ResizeObserver performance
2026-07-24 17:28:00 +08:00
Karl Seguin
5a59743f13 stability: Poll terminate state during large HTML parsing
V8's terminate isn't pre-emptive. We can arm it, but it still hast to cross
a boundary to fire. JavaScript that triggers a near endless Zig loop won't be
able to interrupt the Zig code:

```
while (true) {
  el.innerHTML += el.innerHTML;
}
```

Can generate a huge HTML input that the Parser will work on for ages. I don't
have a general solution to this. I've made the Parser (and DOMParser) check the
terminate state every 1024 appends. This only covers one specific case, but it's
possibly common enough to guard again, specifically because we don't have
rendering/dimensions, and many websites will append text until certain
dimensions are reached.

But it wouldn't for example, catch a similar:

while (true) {
  el.appendChild(el.firstChild.cloneNode(true));
}
2026-07-24 17:17:33 +08:00
Karl Seguin
4565501aa8 Merge pull request #3034 from mh0pe/codex/svg-02-values
webapi: add live SVG scalar values
2026-07-24 14:13:41 +08:00
Karl Seguin
d75747fd20 Merge pull request #3035 from lightpanda-io/Float16Array
v8: Expose Float16Array
2026-07-24 11:54:38 +08:00
Karl Seguin
e2f80ace33 update v8 dep 2026-07-24 11:34:45 +08:00
Karl Seguin
122a4f1001 perf: improve ResizeObserver performance
https://github.com/lightpanda-io/browser/pull/3000 improved the correctness of
ResizeObserver. The main changes were (a) making sure an observe results in
an initial callback and (b) invoking the callback for cases that we can
identity (e.g. visibility change).

Like the other observers, we triggered a check on domChanged. But, unlike the
other observers, the check is relatively expensive, namely because it involves
style lookups.

This commit introduces a number of performance improvements to reduce the check
and dispatch frequency.

1 - Only trigger on an allow list of attribute changed (id, class, hidden, width
 ...)
2 - Pre-filter only on observed elements
3 - Leverage the visibility cache for more efficient delivery
2026-07-24 11:23:00 +08:00
Karl Seguin
ed9a25f470 fix test 2026-07-24 10:18:59 +08:00
Karl Seguin
a6af331ab2 zig fmt 2026-07-24 08:25:21 +08:00
Karl Seguin
2b945aa1f9 cdp: ignore duplicate enable calls
CDP driver can send multiple Network.enable which would register the same
listener multiple times. This commit makes it so that only one (the first)
callback registered for a listener+eventtype is used. Subsequent registration
for the same listener+eventtype are ignored. This is safe because all callbacks
are currently static. It's a mistake (enforced by a debug-only assertion) for
code to try to register a different callback for an already registered listener+
eventtype.

This generalizes https://github.com/lightpanda-io/browser/pull/3038
2026-07-24 08:20:32 +08:00
Karl Seguin
de85a51dda Merge pull request #3039 from lightpanda-io/fix-help-pager
cli: fix help pager broken by lp.io's failing allocator
2026-07-24 08:10:45 +08:00
Karl Seguin
8fbcc7e5c1 Merge pull request #3015 from lightpanda-io/cdp-utf8-sanitization
cdp: Sanitize non-UTF 8 values
2026-07-24 08:03:38 +08:00
Karl Seguin
76e2e7e619 Merge pull request #2983 from lightpanda-io/layer-ordering
css: Respect @layer priority
2026-07-24 08:03:03 +08:00
Karl Seguin
05957a2eb9 Merge pull request #3044 from lightpanda-io/fix-report-error-crash
Fix Seg Fault on `window.reportError`
2026-07-24 08:01:53 +08:00
Muki Kiboigo
fccd6bf90b acquire ref on event before dispatchDirect on reportError 2026-07-23 12:57:59 -07:00
Madison Steiner
c40a2ccac6 webapi: add live SVG scalar values 2026-07-23 08:18:43 -07:00
Karl Seguin
40894a6bfd Merge pull request #3008 from lightpanda-io/zig-0.16-flake
Update Nix flake for Zig 0.16
2026-07-23 21:35:41 +08:00
Muki Kiboigo
791af8fded update Nix flake for Zig 0.16 2026-07-23 05:54:13 -07:00
Karl Seguin
542d9a333b perf, fix: Avoid tight tick loop before page loads
https://github.com/lightpanda-io/browser/pull/2999 fixed a spin loop when the
page had no i/o but had tasks, something we'd expect to see at page-load end.
But it introduced a similar spin loop as what it fixed on page-start, before the
page has anything to do.

Specifically, 2999 preventing i/o pollings when tasks were waiting. But, the
code doesn't run tasks until there's a "runnable" task. On Frame start, we
register a background task. Net result is that, for the first 200ms, everything
is fine, but then the task is due, so we don't poll, but we also don't run the
tasks, repeating a tick(0) loop.

The solution is simply to disable the 2999 optimization when there's no
runnable page.
2026-07-23 20:10:40 +08:00
Pierre Tachoire
3c925f740c Merge pull request #3040 from lightpanda-io/fix/lightpanda-request-blocking
Fix/lightpanda request blocking
2026-07-23 12:39:17 +02:00
Adrià Arrufat
4840a96645 cli: fix help pager broken by lp.io's failing allocator
std.Io.Threaded.init_single_threaded sets .allocator = .failing, which
spawnPosix uses to build the child's argv/env, so
std.process.spawn(lp.io, ...) always returns OutOfMemory and printPaged
silently fell back to plain output. Spawn the pager through a local
Threaded instance with a real allocator and the real environ (the
single-threaded one is empty, breaking PATH lookup of the less
fallback).
2026-07-23 12:16:19 +02:00
Pierre Tachoire
303a3666b6 don't count blocked redirects as followed
Move the http_redirects metric increment after the URL block check so a
redirect that gets blocked is recorded as an error, not a redirect.
2026-07-23 12:15:50 +02:00
Pierre Tachoire
43d17a78f2 skip empty URL block patterns consistently
Centralize empty-pattern filtering in UrlBlocklist.init/initPatterns so
the CDP setBlockedURLs path matches the CLI --block-urls behavior. Keep
blocks aligned with the filtered patterns.
2026-07-23 12:15:49 +02:00
Matt Van Horn
dee40075a0 feat(cdp): implement Network.setBlockedURLs via urlPatterns
Reimplement request blocking on the non-deprecated urlPatterns shape:
each pattern carries an explicit block/allow flag (first match wins),
UrlBlocklist owns the compiled patterns plus their block flags, and the
legacy setBlockedUrls path stays for back-compat. Tests updated.
2026-07-23 12:15:49 +02:00
Matt Van Horn
311ab3aaae feat(cdp): add Network.setBlockedURLs and --block-urls request blocking 2026-07-23 12:15:47 +02:00
Pierre Tachoire
1d3e9617c4 Merge pull request #2891 from lightpanda-io/nikneym/custom-cert-load
Support loading custom CAs (`--ca-cert`, `--ca-path`)
2026-07-23 11:33:30 +02:00
Pierre Tachoire
b90d9def84 remove dead condition 2026-07-23 11:12:50 +02:00
Pierre Tachoire
45c8f7499c adjust help for --ca-* options 2026-07-23 10:33:41 +02:00
Karl Seguin
a50c38b672 Merge pull request #3016 from Ppsoft1991/fix/cdp-frame-parent
cdp: expose child frame metadata
2026-07-23 12:43:55 +08:00
Karl Seguin
6374dab634 refactor: Use JSON writer to serialize CDP Frame
This has the benefit of avoiding a few arena dupes, but those were small. The
real benefit is consistency with the rest of the code.
2026-07-23 12:22:24 +08:00
Ppsoft1991
f88564b56d cdp: expose child frame metadata
Include parentId on child frame navigation events and recursively serialize child frames in Page.getFrameTree using their live frame and loader IDs.

Fixes #3014
2026-07-23 12:08:45 +08:00
Karl Seguin
084e83572d v8: Expose Float16Array
Depends on https://github.com/lightpanda-io/zig-v8-fork/pull/191

If nothing else, it allows more WPT tests to pass, e.g.:
/websockets/Send-binary-arraybufferview-float16.any.html?default
2026-07-23 10:51:48 +08:00
Karl Seguin
0d77c501db Merge pull request #3012 from mh0pe/codex/svg-01-factory
webapi: derive SVG prototype chains
2026-07-23 10:31:38 +08:00
Madison Steiner
7140cfab5a webapi: derive SVG prototype chains 2026-07-23 08:05:40 +08:00
Karl Seguin
6f82bdcd51 Merge pull request #3026 from staylor/inline-finalizer-callbacks
browser: inline finalizer callbacks
2026-07-23 08:02:26 +08:00
Karl Seguin
95ed50500b Merge pull request #3000 from lightpanda-io/resize-observer
webapi: Improve ResizeObserver
2026-07-23 07:48:40 +08:00
Karl Seguin
bd19246b45 Merge pull request #2999 from lightpanda-io/runner-tick-signal
perf: Improve Runner tick signaling on macrotask-only wait
2026-07-23 07:48:27 +08:00
Karl Seguin
bbbbfc7314 Merge pull request #3024 from lightpanda-io/agent-console-sink
script: route console output through an optional sink
2026-07-23 07:33:08 +08:00
Karl Seguin
8f562330c8 perf: Improve Runner tick signaling on macrotask-only wait
Currently, Runner assumes that HttpClient.tick did something. But it's possible
that HttpClient had nothing to do, and thus didn't poll. In that case, Runner
would return .{.ok = 0} and Runner's caller would also certainly call
Runner.tick again, resulting in a spin-loop.

The reason Runner allows this to happen is because it can still have macrotasks
to run. So now, when HttpClient.tick has done nothing, Runner will return its
ms_to_next_task, rather than 0.

On sites where all i/o is completed, and only macrotasks are waiting, this
significantly reduces CPU usage.
2026-07-23 07:28:32 +08:00