Evidence · DiggingBeagle record
Chrome DevTools MCP: service worker origin and URL allowlist bypass
GitHub advisory for service worker routing through URL policy checks in the Chrome DevTools MCP integration.
- Published
- Oct 30, 2026
- Source role
- primary disclosure
Evidence record
GitHub advisory for service worker routing through URL policy checks in the Chrome DevTools MCP integration.
Claim-level citations (1)
- supportsChrome DevTools MCP URL restrictions missed service worker interception paths: The Chrome DevTools MCP advisory identifies a service worker route that bypasses configured blocked and allowed URL pattern checks.
GHSA-xfxg-8r4q-wj4v, service worker URL restriction bypass description and fix