You'll notice
Useful2 Signal2
Websocket permission prompts can hide the subprotocol list and tell you to deny unless expected.
What's wrong with this entry?
Anonymous. No account, no email.
What
A permission prompt for a websocket tool call can now show a redacted placeholder in place of the actual subprotocol list, telling you it cannot be shown in full and to deny unless you were expecting it.
Details
- Shown when the request payload marks the protocols as withheld; what sets that mark is decided upstream of the dialog.
Evidence
(cannot be shown in full — deny unless expected)
Strings lifted out of the shipped bundle, so the claim above can be checked against them.