Gasoline v0.6.00 Released
What’s New in v0.6.00
Section titled “What’s New in v0.6.00”Gasoline v0.6.00 introduces the Link Health Analyzer, plus browser automation, recording, and performance analysis for AI agents. Check all links on your page, record full sessions with video, capture performance metrics, and let AI agents test, debug, and fix your app automatically. Complete visibility. You stay in control.
Features
Section titled “Features”-
Link Health Analyzer — Automatically check all links on your page for issues (broken, redirects, auth-required). 20 concurrent checks, categorized results, and async tracking with correlation IDs.
-
Full Recording System — Record browser tabs with video and audio. Videos stream to local disk. No cloud, no transcoding—raw WebM format.
-
Permission Prompts — When recording starts, you get a clear prompt to approve it. No silent recordings. You’re always in control.
Security
Section titled “Security”-
CWE-942 Fixed — Replaced wildcard
postMessageorigins withwindow.location.originacross content scripts, test helpers, and background workers. Prevents message hijacking on cross-origin pages. -
Secure Cookie Attributes — Cookie deletion and restoration now include
SecureandSameSiteattributes, preventing session fixation and CSRF vulnerabilities. -
Path Traversal Protection — Hardened file operations in extension persistence layer to prevent directory traversal attacks.
-
Input Validation — Comprehensive validation of extension log queue capacity (2000-entry cap) and screenshot rate limiter bounds to prevent unbounded memory growth.
Performance
Section titled “Performance”-
Smart HTTP Timeouts — 5s default timeout for localhost operations, extended to 30s+ only when accessibility features are requested. Reduces false positives while respecting slow connections.
-
Atomic File Writes — Log rotation uses temp + rename pattern, preventing partial writes and data loss on disk full.
-
Efficient Deduplication — SeenMessages pruning optimized for large event volumes.
Testing
Section titled “Testing”- 99.4% Pass Rate — 154 out of 155 smoke tests pass (one known edge case with watermark on rapid navigation).
- Comprehensive UAT Suite — 140 tests covering recording, permissions, security, performance, and WebSocket capture.
- Full TypeScript Strict Mode — No implicit any, zero Codacy security issues.
Breaking Changes
Section titled “Breaking Changes”- Extension v0.5.x → v0.6.00 — Auto-update via Chrome. Manual re-add may be required if permissions are denied.
- MCP Server — Same 4-tool interface; no API changes.
Upgrade
Section titled “Upgrade”Browser Extension
Section titled “Browser Extension”📥 Download gasoline-extension-v0.6.00.crx (480 KB)
Extension ID: behrmkvjipzkr7hu6mwmbt5vpdgcdyvk
Drag-drop the signed CRX into chrome://extensions/:
- Download the file above
- Open
chrome://extensions/ - Enable Developer mode (top right)
- Drag and drop the
.crxfile into the page - Click “Add extension” when prompted
MCP Server
Section titled “MCP Server”curl -sSL https://raw.githubusercontent.com/brennhill/gasoline-agentic-browser-devtools-mcp/STABLE/scripts/install.sh | bash~/.gasoline/bin/gasoline-agentic-devtools --helpKnown Limitations
Section titled “Known Limitations”- Recording audio on muted tabs — Tab audio capture requires tab to have sound playing. Silent tabs record video only.
- Watermark on rapid navigation — Watermark may not re-appear if user navigates during recording. Next navigation resets correctly.
- Chrome 120+ only — Manifest v0.3 (MV3) requires Chrome 120 or later. No Safari/Firefox support in v6.
What’s Next
Section titled “What’s Next”- File Upload API — Automated file form handling for bulk uploads to no-API platforms.
- Replay System — Event playback with timeline scrubbing.
- Deployment Integration — Capture git-linked deploy events for post-incident correlation.