Batched browser URL checks now screen every URL in the batch, not just the first, before allowing the call
For browser_batch tool calls, which bundle multiple browser actions into one call, Claude Code now checks every URL in the batch up front rather than just the primary one. If any URL in the batch is a non-web or unparseable address (like a browser-internal page), the whole call is denied with a message telling the user to navigate to a web page first. If any URL matches a denied-domain rule, the call is denied and the specific offending URL is named.
This closes a gap where a batched call could slip past domain restrictions or hit an internal browser page as long as only a secondary URL in the batch was the problem, instead of the first one being checked.
Changed Claude in Chrome in auto mode to skip the extension's per-site check for classifier-approved calls, as bypass mode does, fixing…