Files
browser/src/cdp
Scott Taylor 723e7eb9d5 fix(cdp): validate User-Agent in Network.setExtraHTTPHeaders
A caller-supplied User-Agent overrides the built-in default and goes out
on the wire, so reject non-printable values the same way
Emulation.setUserAgentOverride and the --user-agent flag do.

We deliberately do NOT apply validateUserAgent's reserved (Mozilla)
check here: unlike the Emulation override (kept Lightpanda-branded to
keep go-rod working), setExtraHTTPHeaders is the intended,
Chrome-compatible escape hatch for setting a real browser-like
User-Agent, which by definition contains Mozilla.

Refs #2704
2026-06-12 12:28:19 -04:00
..
2026-04-25 13:22:41 +08:00