Skip to content
Trending storyDeveloping

Playwright's bundled test browser can lag Chrome security fixes

1 article1 sourcesince Nov 3Last article 1h ago ·

Overview

AISummary of 1 article

Playwright ships no browser itself, but `npx playwright install` downloads a pinned Chrome for Testing build that can miss Chrome's latest security fixes and runs with the sandbox off by default, according to meng shao (@shao__meng).

Playwright MCP and the CLI instead use the stable Chrome or Edge already installed on the machine, which receive normal updates.

For scripts that visit untrusted sites, Playwright recommends launching with `chromium.launch({ channel: 'chrome', chromiumSandbox: true })`, the source says.

Written by AI from the articles below · updated Nov 3, 10:18 PM ET

Check the sources:

Latest developmentNov 3, 9:50 PM ET
Playwright ships no browser; only its pinned test build lags Chrome security fixes

Article timeline

The articles in this story. Times are ET.

Nov 3
  1. meng shaoX
    Playwright ships no browser; only its pinned test build lags Chrome security fixes

    AIPlaywright packages bundle no browser, but `npx playwright install` downloads a pinned Chrome for Testing build that can miss Chrome's latest security fixes and runs with the sandbox off by default. Playwright MCP and the CLI use your stable Chrome or Edge, which receive normal updates. For scripts visiting untrusted sites, Playwright recommends `chromium.launch({ channel: 'chrome', chromiumSandbox: true })`.

    Image from @shao__meng's post

Heat Trend

Not enough continuous observations to show a trend yet.