2 Commits

Author	SHA1	Message	Date
Jun	57d946b730	fix(browser): drain live cleanup before releasing session (#6284) ... * fix(browser): drain live cleanup before releasing session * test(browser): cover cancellation precedence during cleanup * style(browser): separate cancellation regressions	2026-10-05 12:15:21 +08:00
YxinMiracle	ce50a28dfd	fix(auth): enforce write permission for Live Browser WebSockets (#5621) ... * fix(auth): enforce write permission for Live Browser WebSockets Resolve route permissions before accepting browser streams and require threads:write, matching the existing HTTP navigation endpoint. Preserve shared authorization failure semantics and reject unexpected setup errors before acquiring a browser session. Add authorization, frame delivery, input dispatch, cancellation, and ownership regressions. Document the admission-only permission check. * fix(auth): improve browser authorization diagnostics --------- Co-authored-by: YxinMiracle <“939157765@qq.com”>	2026-09-22 10:43:49 +08:00