Google GitGoogle Git
Sign in
chromium/devtools/devtools-frontend/refs/heads/chromium/7887
commit
491edd6addbc7796812b396e8ee077abe436f31b
[log]
author
Jack Franklin <jacktfranklin@google.com>
Tue Jun 09 16:26:08 2026
committer
devtools-frontend-scoped@luci-project-accounts.iam.gserviceaccount.com <devtools-frontend-scoped@luci-project-accounts.iam.gserviceaccount.com>
Wed Jun 10 13:51:41 2026
tree
120a6079f37abbaf845f62beb595c5afb4daabe3
parent
f4d69d8367695189092d7b62945595aeeb5fe7ac [diff]
AI: Isolate HAR request origins to prevent cross-origin bypass

Imported HAR requests previously shared the same origin as live pages
if the URLs matched. This allowed prompt injections in crafted HAR
files to persist in the conversation history when transitioning to a
live page of the same origin, potentially leading to unauthorized
isolated-world JS execution.

This change introduces an `isImportedHar` flag on `NetworkRequest` to
identify HAR-imported requests. These requests are assigned a virtual
origin (`imported-har://${domain}`) in the AI context. This prevents
them from matching the origin of live pages, forcing a new conversation
and clearing the history upon transition.

Fixed: 521479646
Change-Id: I5cf396304b8517769c2250d3926dd901f4ebb6a8
Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/7913782
Auto-Submit: Jack Franklin <jacktfranklin@chromium.org>
Reviewed-by: Alina Varkki <alinavarkki@chromium.org>
Commit-Queue: Alina Varkki <alinavarkki@chromium.org>
7 files changed
tree: 120a6079f37abbaf845f62beb595c5afb4daabe3
  1. .agents/
  2. .gemini/
  3. .github/
  4. .vscode/
  5. build_overrides/
  6. config/
  7. docs/
  8. extension-api/
  9. extensions/
  10. front_end/
  11. inspector_overlay/
  12. mcp/
  13. node_modules/
  14. scripts/
  15. test/
  16. third_party/
  17. v8/
  18. build
  19. buildtools
  20. .clang-format
  21. .clang-format-ignore
  22. .editorconfig
  23. .env.template
  24. .geminiignore
  25. .git-blame-ignore-revs
  26. .gitallowed
  27. .gitattributes
  28. .gitignore
  29. .gitmodules
  30. .gn
  31. .mailmap
  32. .npmignore
  33. .npmrc
  34. .style.yapf
  35. .stylelintignore
  36. .stylelintrc.json
  37. AUTHORS
  38. BUILD.gn
  39. codereview.settings
  40. CONTRIBUTING.md
  41. DEPS
  42. DIR_METADATA
  43. eslint.config.mjs
  44. favicon.ico
  45. LICENSE
  46. OWNERS
  47. package-lock.json
  48. package.json
  49. PRESUBMIT.py
  50. README.md
  51. SECURITY.md
  52. WATCHLISTS
README.md

Chrome DevTools frontend

npm package

The client-side of the Chrome DevTools, including all TypeScript & CSS to run the DevTools webapp.

Source code and documentation

The frontend is available on chromium.googlesource.com. Check out the Chromium DevTools documentation for instructions to set up, use, and maintain a DevTools front-end checkout, as well as design guidelines, and architectural documentation.

Source mirrors

DevTools frontend repository is mirrored on GitHub.

DevTools frontend is also available on NPM as the chrome-devtools-frontend package. It's not currently available via CJS or ES modules, so consuming this package in other tools may require some effort.

The version number of the npm package (e.g. 1.0.373466) refers to the Chromium commit position of latest frontend git commit. It's incremented with every Chromium commit, however the package is updated roughly daily.

Getting in touch

There are a few options to keep an eye on the latest and greatest of DevTools development: