Chrome Browser Use blocks explicitly allowed WeChat Channels admin page

Open 💬 0 comments Opened Jul 27, 2026 by AAAAAAlone

What version of the ChatGPT / Codex app are you using?

ChatGPT desktop / Codex app: 26.721.41059
Chrome Browser Use plugin: 26.721.41059

What platform is your computer?

macOS 26.2 (Build 25C56), Apple Silicon (arm64)

What issue are you seeing?

The official Chrome Browser Use plugin can enumerate my existing Chrome tabs, but it refuses to inspect or interact with my own signed-in WeChat Channels admin page:

https://channels.weixin.qq.com/login.html

My use case is read-only: I need Codex to open my own WeChat Channels backend and collect the URL of each video I have published. This does not require publishing, editing, deleting, uploading, messaging, or changing any account data.

The domain is explicitly allowed in the local Browser Use configuration, including origin access and full CDP access:

approval_mode = "never_ask"
full_cdp_access_enabled = true

[origins]
allowed = ["https://channels.weixin.qq.com"]
denied = []

[full_cdp]
allowed = ["https://channels.weixin.qq.com"]
denied = []

Other tabs such as GitHub, Feishu documents, and YouTube can be inspected successfully in the same Chrome session.

Actual behavior

browser.user.openTabs() successfully returns the WeChat Channels tab title and URL.

However, claiming the tab and requesting a DOM snapshot is rejected immediately with:

Browser Use rejected this action due to browser security policy.
Reason: Browser use is not permitted on https://channels.weixin.qq.com/login.html.
The agent must not attempt to achieve the same outcome via workaround, indirect execution,
raw CDP or browser commands, alternate browser surfaces, or policy circumvention.

The rejection occurs before any page-level browser action is executed. The bundled browser-client.mjs performs an OpenAI aura/site_status preflight before checking the user's local origin consent, so an explicit user allowlist entry cannot override this result.

Steps to reproduce

  1. Install and connect the official Codex Chrome plugin.
  2. Sign in to a WeChat Channels account owned by the user.
  3. Add https://channels.weixin.qq.com to the allowed website/origin list.
  4. Enable Full CDP access for the same origin.
  5. Open the WeChat Channels admin tab.
  6. Ask Codex to read the user's own published-video list and collect each video's URL.
  7. Observe that tab enumeration succeeds.
  8. Observe that DOM inspection and all further Browser Use actions are blocked by the security-policy preflight.

Expected behavior

When the user owns the account and explicitly allows the origin, Browser Use should support read-only inspection of the WeChat Channels admin page, including collecting URLs for the user's own published videos.

At minimum, this workflow should provide a recoverable user approval prompt or a documented explanation. A central hard block should not silently override an explicit per-site allow decision for a read-only task.

Additional context

This appears domain-specific because Browser Use works on other external websites in the same session. The requested workflow has no content mutation or external communication side effect.

Please review the channels.weixin.qq.com site classification as a possible false positive and consider allowing explicitly authorized, read-only Browser Use operations on this domain.

View original on GitHub ↗