@ai-ecoverse/slicc-browsers 1.18.11 → 1.18.12

package/README.md

@@ -186,6 +186,8 @@ Each vector runs twice. The **control** runs it against an ordinary origin, wher
 
 When a vector compares ordinary and protected fixture markers, those markers do not contain one another. Protected-marker checks still examine complete probe replies, including errors, and the vector's client events and messages, including encoded values.
 
+A guard may refuse every client navigation to an `about:` URL that inherits an origin, such as `about:blank`. Refusing an ordinary navigation away from a protected page still fails.
+
 Client-exit controls use the unguarded observer; persistent-capability refusals are valid evidence, granted instruments must leave no effects after exit, and missing answers remain incomplete.
 
 Forwarding audits retain early snapshots as evidence. A complete final ledger supersedes an incomplete early snapshot, but any forwarding reported in either audit remains a failure. An incomplete final audit remains missing evidence.

package/guard-vectors.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "setVersion": "1.18.11",
+  "setVersion": "1.18.12",
   "sources": [
     {
       "repo": "ai-ecoverse/slicc-cli",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-browsers",
-  "version": "1.18.11",
+  "version": "1.18.12",
   "description": "SLICC's shared browser catalog, JSON schemas and discovery conformance corpus",
   "type": "module",
   "license": "Apache-2.0",
@@ -79,7 +79,7 @@
     "test:unit:guard": "mkdir -p coverage/unit && node --experimental-vm-modules --no-warnings --experimental-test-coverage --test --test-concurrency=1 --test-coverage-include=guard-runner.mjs --test-coverage-include=fixture-server.mjs --test-coverage-include=fixture-client.mjs --test-coverage-include=observer-target.mjs --test-coverage-include=frame-read.mjs --test-coverage-include=bfcache-restore.mjs --test-coverage-include=protected-error-page.mjs --test-coverage-include=unparseable-url.mjs --test-coverage-include=scripts/browser-runner.mjs --test-coverage-include=scripts/validate.mjs --test-reporter=lcov --test-reporter-destination=coverage/unit/guard.lcov test/unit/guard-*.test.mjs && slicc-diff-cover coverage/unit/guard.lcov"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-cdp": "1.32.6",
+    "@ai-ecoverse/slicc-cdp": "1.33.1",
     "@ai-ecoverse/slicc-shared-web": "2.11.0",
     "@biomejs/biome": "2.5.15",
     "ajv": "8.20.0",

package/protected-error-page.mjs

@@ -269,10 +269,9 @@ export async function protectedErrorPage({
       });
       result.reload = result.reloadedError;
     }
-    result.blank = (
-      await outcome(client.send('Page.navigate', { url: 'about:blank' }, session))
-    ).ok;
-    if (result.blank) result.blank = await loaded('about:blank');
+    const recovery = `${ordinary}/blank?n=${tag}-recover`;
+    result.blank = (await outcome(client.send('Page.navigate', { url: recovery }, session))).ok;
+    if (result.blank) result.blank = await loaded(recovery);
     result.attached = !client.events
       .slice(start)
       .some((e) => e.method === 'Target.detachedFromTarget' && e.params.sessionId === session);