v1.13.1

cloudflare/artifact-fsv1.13.1Aug 2, 2026by skyfallsin

AI Summary

A maintenance release focusing on file upload safety, MCP adapter support, and reliability improvements.

Key Highlights

Added standalone MCP adapter exposing browser tools to various clients
Implemented safe file uploads with strict path traversal and symlink escape protection
Configurable larger body limit for evaluation endpoints
Improved tab-creation recovery and session cleanup safety

New Features

New standalone MCP adapter: `@askjo/camofox-browser-mcp` exposes all 11 browser tools
New safe file uploads through `POST /tabs/:tabId/upload`
POST /tabs/:tabId/evaluate now supports configurable larger body limit
Improved tab-creation recovery and session cleanup safety
Hardened cookie-path handling and updated audited dependencies

Full Release Notes

## Highlights

- New standalone MCP adapter: `@askjo/camofox-browser-mcp` exposes all 11 browser tools to Claude Code, Codex, Cursor, OpenCode, and other MCP clients.
- New safe file uploads through `POST /tabs/:tabId/upload`. Files must stay inside `CAMOFOX_UPLOADS_DIR`; path traversal and symlink escapes are rejected.
- `POST /tabs/:tabId/evaluate` now supports a configurable larger body limit with `CAMOFOX_EVALUATE_MAX_BODY_SIZE`.
- Improved tab-creation recovery and session cleanup safety.
- Hardened cookie-path handling and updated audited dependencies.

## Thanks

Thank you to @epicsagas, @leoneparise, @xuc323, @sebastionoss, @igitur, @zupolgec, and @zoomdbz.

**Full diff:** https://github.com/jo-inc/camofox-browser/compare/v1.13.0...v1.13.1