Fix the artifact browser navigation race

Author: elkaix

docs/security/dependency-remediation-2026-08.md

@@ -70,5 +70,6 @@ handlers, script elements, and `javascript:` URLs cannot execute or remain activ
 - A dismissed or auto-dismissed record cannot justify a vulnerable lockfile entry.
 - Historical `AUTO_DISMISSED`, `DISMISSED`, and `FIXED` states can remain in GitHub reporting after
   the lockfile is clean.
-- The development-dependency auto-dismiss preset is disabled because development dependencies can
-  enter shipped artifacts in this monorepo.
+- The development-dependency auto-dismiss preset must be disabled because development dependencies
+  can enter shipped artifacts in this monorepo. Verify this repository setting in GitHub's web UI;
+  the repository REST and GraphQL APIs do not expose its state.

scripts/security/check-built-browser.mjs

@@ -285,20 +285,22 @@ async function main() {
     browser = launched.browser;
     const endpoint = new URL(launched.endpoint);
     const targetResponse = await fetch(
-      `http://127.0.0.1:${endpoint.port}/json/new?${encodeURIComponent(`${origin}/`)}`,
+      `http://127.0.0.1:${endpoint.port}/json/new?about:blank`,
       { method: 'PUT' },
     );
     if (!targetResponse.ok) throw new Error(`Chrome target creation failed: ${targetResponse.status}`);
     const target = await targetResponse.json();
     client = new CdpClient(target.webSocketDebuggerUrl);
     await client.connect();
     await client.call('Runtime.enable');
+    await client.call('Page.enable');
+    await client.call('Page.navigate', { url: `${origin}/` });
     for (let attempt = 0; attempt < 100; attempt += 1) {
       const ready = await client.call('Runtime.evaluate', {
-        expression: 'document.readyState',
+        expression: '({ origin: location.origin, readyState: document.readyState })',
         returnByValue: true,
       });
-      if (ready.result.value === 'complete') break;
+      if (ready.result.value.origin === origin && ready.result.value.readyState === 'complete') break;
       await new Promise((resolveWait) => {
         setTimeout(resolveWait, 50);
       });