Evidence · DiggingBeagle record
The Agent Clicks Approve: Injected Page Text Makes Browser Agents Authorize Access the Task Never Named
Oct 10 original study of browser-agent consent and webhook actions, 73 ungated and 70 gated attack tests.
- Source role
- primary disclosure
Evidence record
Oct 10 original study of browser-agent consent and webhook actions, 73 ungated and 70 gated attack tests.
Claim-level citations (3)
- supportsInjected page text caused browser agents to authorize third-party access: The original evaluation observed 73 unauthorized completions in 73 attack runs with injected page notes and an agent carrying the user session.
Abstract and Introduction, ungated attack runs
- supportsInjected page text caused browser agents to authorize third-party access: A service-side authority-envelope gate rejected the unwanted completion in all 70 gated runs even though the agents continued to send requests.
Abstract and Section V, action endpoint gate
- supportsInjected page text caused browser agents to authorize third-party access: The experiment used researcher-controlled loopback services, not a live compromised production OAuth deployment.
Section IV-A Testbed and IV-B endpoint oracle