[Chrome extension] False-positive site block for read-only mp.weixin.qq.com article

Open 💬 3 comments Opened Jul 19, 2026 by chenlining93
💡 Likely answer: A maintainer (github-actions[bot], contributor) responded on this thread — see the highlighted reply below.

What version of Codex CLI is running?

0.145.0-alpha.18

What subscription do you have?

ChatGPT account (exact plan is not exposed in Codex diagnostics)

Which model were you using?

gpt-5.6-sol

What platform is your computer?

macOS 26.4.0, Apple Silicon (arm64)

What terminal emulator and version are you using (if applicable)?

Codex desktop app with the official Chrome extension

Codex doctor report

What issue are you seeing?

Browser Use blocks a benign, read-only request to summarize a WeChat Official Account article in the user's already signed-in Chrome tab.

The Chrome extension is connected and can list the tab and its title, but claiming the tab or reading its DOM fails with:

Browser Use rejected this action due to browser security policy.
Reason: Browser use is not permitted on https://mp.weixin.qq.com/s/TU8zYlg9KkrnGyEBhmhZqA

No form submission, upload, purchase, credential access, or other side effect was requested. The task was only to read and summarize a photography-event article.

What steps can reproduce the bug?

Uploaded thread: 019f7854-e08a-7151-8758-9037d06c5b57

What is the expected behavior?

Codex should honor the explicit per-site Browse permission and allow read-only inspection of the rendered article, or present a user-overridable confirmation when the request is benign.

Additional information

The same user previously used ChatGPT to summarize another mp.weixin.qq.com article successfully, so this appears inconsistent or regressed. Local diagnostics show the Chrome plugin, Browser Use, authentication, configuration, and network reachability are healthy. Logs and diagnostics were uploaded through /feedback for thread 019f7854-e08a-7151-8758-9037d06c5b57.

For privacy, the full doctor report is not pasted into this public issue; it is included in the uploaded feedback bundle.

View original on GitHub ↗

3 Comments

github-actions[bot] contributor · 1 month ago

Potential duplicates detected. Please review them and close your issue if it is a duplicate.

  • #34006

Powered by Codex Action

wuxie888 · 1 month ago

I can reproduce the same false-positive block on a newer macOS build, and I have uploaded the full Browser Use logs through /feedback.

Environment:

  • Codex Desktop: 26.721.31836 (build 5828)
  • Codex CLI runtime: 0.146.0-alpha.3.1
  • macOS 15.7.4, Apple Silicon
  • Feedback/thread ID: 019f8d1e-eb2a-74a3-b55b-a6232684847f
  • Affected URL: https://mp.weixin.qq.com/s/9-5xh3ReTaQEgTf_aTvE2Q

Observed behavior:

  • The Chrome extension is connected and openTabs() works.
  • The target tab can be detected by exact title and URL when opened manually.
  • Chrome claimTab is rejected before any DOM read.
  • Creating a new Chrome tab and calling goto is rejected before page load.
  • The Codex in-app browser rejects goto in the same way.
  • The rejection still reproduces after updating and fully restarting Codex.

Exact error:

Browser Use rejected this action due to browser security policy.
Reason: Browser use is not permitted on https://mp.weixin.qq.com/s/9-5xh3ReTaQEgTf_aTvE2Q.

Local checks:

  • https://mp.weixin.qq.com is explicitly present in the Browser origins allowlist.
  • The deny list is empty.
  • Browser approval mode is never_ask and full CDP access is enabled.
  • codex doctor reports the installation, configuration, authentication, state databases, network, and WebSocket as healthy.

Important comparison: the exact same article can be read successfully by Codex through both the in-app browser and Chrome on another computer. This suggests a policy decision, task/device binding, or backend routing inconsistency rather than a universal block on the domain.

Please correlate this report with feedback ID 019f8d1e-eb2a-74a3-b55b-a6232684847f and inspect the Browser Use policy decision for the rejected goto / claimTab calls.

chenman9226 · 28 days ago

I can reproduce this issue with another public, read-only WeChat Official Account article on July 31, 2026.

Environment

  • Codex CLI: 0.144.1
  • Browser plugin bundle: 26.727.40816
  • macOS: 26.5.2
  • Architecture: Apple Silicon (arm64)
  • Browser backend: Official Chrome Browser Use extension

URL

<https://mp.weixin.qq.com/s/Z8TyljnWcQIHqQY-snduEg>

Requested action

Read and summarize the public article.

No form submission, upload, download, purchase, credential access, or other side effect was requested.

Actual result

Browser Use rejects the navigation before the article is loaded:

Browser Use rejected this action due to browser security policy.
Reason: The site-safety policy blocks this action; no user permission
prompt or Auto-review was attempted. Browser use is not permitted on
https://mp.weixin.qq.com/s/Z8TyljnWcQIHqQY-snduEg.

This is specifically reported as a site_status decision, not:

  • a saved user denial;
  • an enterprise policy restriction; or
  • an HTTP or anti-bot response from the target website.

Expected result

For a public, read-only article, Codex should either:

  1. honor the user’s explicit per-site permission and allow the page to be inspected; or
  2. provide a user-overridable confirmation instead of applying a non-transparent server-side hard block.

Blocking mp.weixin.qq.com removes access to a major source of public Chinese-language information and significantly limits research and summarization workflows.

Feedback/session ID: 019fb631-32b1-7be1-b9aa-ac42ea0098d6