v0.7.0 is a ground-up rewrite delivering a complete browser observability platform. This is the first stable release — all prior versions are deprecated.
Gasoline v6.0.0 introduces the Link Health Analyzer, plus browser automation, recording, and performance analysis for AI agents. Check all links on your page, record full sessions with video, capture performance metrics, and let AI agents test, debug, and fix your app automatically. Complete visibility. You stay in control.
Link Health Analyzer — Automatically check all links on your page for issues (broken, redirects, auth-required). 20 concurrent checks, categorized results, and async tracking with correlation IDs.
Full Recording System — Record browser tabs with video and audio. Videos stream to local disk. No cloud, no transcoding—raw WebM format.
Permission Prompts — When recording starts, you get a clear prompt to approve it. No silent recordings. You’re always in control.
CWE-942 Fixed — Replaced wildcard postMessage origins with window.location.origin across content scripts, test helpers, and background workers. Prevents message hijacking on cross-origin pages.
Secure Cookie Attributes — Cookie deletion and restoration now include Secure and SameSite attributes, preventing session fixation and CSRF vulnerabilities.
Path Traversal Protection — Hardened file operations in extension persistence layer to prevent directory traversal attacks.
Input Validation — Comprehensive validation of extension log queue capacity (2000-entry cap) and screenshot rate limiter bounds to prevent unbounded memory growth.
Smart HTTP Timeouts — 5s default timeout for localhost operations, extended to 30s+ only when accessibility features are requested. Reduces false positives while respecting slow connections.
Atomic File Writes — Log rotation uses temp + rename pattern, preventing partial writes and data loss on disk full.
Efficient Deduplication — SeenMessages pruning optimized for large event volumes.
Gasoline v5.8.0 solves a long-standing WebSocket capture blind spot: pages that create WebSocket connections before the inject script loads now have those connections captured automatically. This release also adds visual feedback for AI actions and ships a comprehensive 106-test UAT suite.
Early-patch WebSocket capture — A new world: "MAIN" content script patches window.WebSocket before any page JavaScript runs. This means sites like Binance that create WebSocket connections immediately on page load now have those connections captured and visible via observe(websocket_status). Buffered connections are seamlessly adopted when the full inject script initializes.
Visual action toasts — When AI tools use interact() to navigate, execute JavaScript, or highlight elements, a brief toast overlay appears on the page showing what the AI is doing. This makes AI actions visible to developers watching the browser.
