All pull requests

Pull requests

• fix(websocket): validate server Sec-WebSocket-Protocol against offered list

  #4462·DeryFerd opened Nov 4, 2026Contributor·

  ·
  

• webapi: enable [CEReactions] for createElement and createElementNS

  #4459·nikneym opened Nov 4, 2026Contributor·

  ·

• webapi: don't drain [CEReactions] queue on constructor exit

  #4458·nikneym opened Nov 4, 2026Contributor·

  ·

• mcp: stream tool output over SSE on the HTTP transport

  #4457·arrufat opened Nov 4, 2026Contributor·

  ·

• chore: dedupe bad port check

  #4456·karlseguin opened Nov 4, 2026Collaborator·

  ·

• mcp: deliver notifications/cancelled on the HTTP transport

  #4455·arrufat opened Nov 4, 2026Contributor·

  ·

• tools: report the page's WebMCP tools whenever they change

  #4454·arrufat opened Nov 4, 2026Contributor·

  ·

• cors: add --cors-wildcard-authorization for Chromium compatibility

  #4453·yjgwak opened Nov 4, 2026·

  ·
  3

• serve: --cdp-shared-browser lets CDP clients share one browser

  #4452·arrufat opened Nov 4, 2026Contributor·

  ·

• Geometry entry reset

  #4449·karlseguin opened Nov 4, 2026Collaborator·

  ·

• css: :defined follows the custom element state, customized built-ins upgrade

  #4448·arrufat opened Nov 4, 2026Contributor·

  ·

• perf: target style manager invalidation

  #4445·karlseguin opened Nov 4, 2026Collaborator·

  ·

• parser: preserve XML namespace declarations and CDATA sections

  #4444·ZedingZhang opened Nov 4, 2026·

  ·
  1

  2

• cdp: accept lone surrogate escapes instead of closing the connection

  #4443·jaeminbird opened Nov 4, 2026·

  ·
  3

• http: only same-site or top-level navigation can set SameSite

  #4442·karlseguin opened Nov 4, 2026Collaborator·

  ·

• http: track proxy and server credentials separately.

  #4441·karlseguin opened Nov 4, 2026Collaborator·

  ·

• webapi: improve input step with fractions

  #4440·karlseguin opened Nov 4, 2026Collaborator·

  ·

• webapi: execCommand 'insertParagraph'

  #4438·karlseguin opened Nov 4, 2026Collaborator·

  ·

• test: event/* test cross validation

  #4437·karlseguin opened Nov 4, 2026Collaborator·

  ·

• tree, render: keep rendered content the raw hidden and aria-hidden cuts dropped

  #4432·coolswood opened Nov 3, 2026Contributor·

  ·
  5

• --wait-until settled

  #4422·karlseguin opened Nov 3, 2026Collaborator·

  ·
  13

• window: honour postMessage's targetOrigin

  #4382·rudycelekli opened Nov 2, 2026Contributor·

  ·
  

• css: resolve computed content from the cascade

  #4372·staylor opened Nov 2, 2026Contributor·

  ·
  21

• Fix/innertext computed display 4298

  #4355·flashdashdotcash opened Nov 2, 2026·

  ·
  2

• agent: add a --temperature option

  #4316·cdebled opened Oct 30, 2026Collaborator·

  ·