Test UserandClaude ad2a12e57e fix(extension): don't fail-open the borrow gate on a transient tabs.get error ...

requestBorrowConfirmation returned `true` (approve the borrow) when
`chrome.tabs.get(tabId)` threw. That fail-open was not one of the
documented fail-open cases in the function's own doc comment (no
candidate window; abort signal; timeout), and the tab was already
fetched successfully moments earlier by the borrow pipeline
(validateBorrowTarget), so a failure here is a transient SW/page hiccup
— not a missing tab. Silently approving a borrow with no confirmation
UI shown defeats the entire human-in-the-loop gate for seizing a user's
logged-in tab.

On a tabs.get failure, fall back to a generic title (the numeric tab id)
and still run the overlay + OS-notification confirmation flow so the
user gets a real chance to approve or deny.

Adds two regression tests (both fail on the unpatched code). Full
extension suite green (361 tests).

Co-Authored-By: Claude <noreply@anthropic.com>

2026-07-02 21:02:54 +08:00

..

assets

Initial public release

2026-06-22 17:36:26 +08:00

src

fix(extension): don't fail-open the borrow gate on a transient tabs.get error

2026-07-02 21:02:54 +08:00

.gitkeep

Initial public release

2026-06-22 17:36:26 +08:00

package.json

Initial public release

2026-06-22 17:36:26 +08:00

PRIVACY.md

Initial public release

2026-06-22 17:36:26 +08:00

PRIVACY.zh-CN.md

Initial public release

2026-06-22 17:36:26 +08:00

tsconfig.json

Initial public release

2026-06-22 17:36:26 +08:00

vitest.config.ts

Initial public release

2026-06-22 17:36:26 +08:00

wxt.config.ts

Initial public release

2026-06-22 17:36:26 +08:00