Repository navigation
[Chrome/Computer Use] campus.163.com is falsely blocked while campus.game.163.com works #40354
Description
What version of the Codex / ChatGPT app are you using?
- ChatGPT/Codex desktop app:
26.818.31338 - Codex CLI:
0.149.0-alpha.4 - Bundled Chrome Browser Use plugin:
26.818.31338 - Computer Use runtime:
26.819.1000816
What platform is your computer?
macOS 26.5.2 (Build 25F84), Apple Silicon (arm64).
What issue are you seeing?
Browser Use and Computer Use appear to falsely block the normal NetEase campus recruiting site campus.163.com, even though the related public recruiting site campus.game.163.com works normally.
The public job page works:
https://campus.game.163.com/app/job/position?id=102
Opening Personal Center redirects to:
https://campus.163.com/app/personal/apply?tab=net
The page renders normally when opened manually in Chrome. The Chrome extension is connected, the site approval setting is Always allow, and Browser Use can enumerate the existing tab and read its title and URL.
However, claiming the tab and requesting a DOM snapshot fails immediately:
Browser Use rejected this action due to browser security policy.
Reason: The site-safety policy blocks this action; no user permission prompt or Auto-review was attempted.
Browser use is not permitted on https://campus.163.com/app/personal/apply.
Computer Use is also stopped after Chrome reaches the same URL:
This session has been stopped because Computer Use is not allowed on the current browser URL.
Note that Computer Use is not allowed on this URL even if the user navigates to it themselves.
This is a read-only request to view the user's own campus application status. No form submission, upload, purchase, messaging, or account modification was requested.
Steps to reproduce
- Enable the official Chrome Browser Use extension in Codex.
- Set website approval to Always allow.
- Open:
https://campus.game.163.com/app/job/position?id=102 - Observe that Browser Use / Computer Use can inspect and interact with this page.
- Open Personal Center, which redirects to:
https://campus.163.com/app/personal/apply?tab=net - Call
browser.user.openTabs(); the tab title and URL are returned successfully. - Claim the tab and request a DOM snapshot.
- Observe
site_status_blockedbefore any DOM content is returned. - Alternatively, use Computer Use after the redirect and observe that the session is stopped because of the current browser URL.
Expected behavior
Codex should allow user-authorized, read-only access to this legitimate recruiting site, or present a recoverable permission prompt.
If the URL is intentionally restricted, the UI should provide an actionable explanation. A site-status decision for one path should also not unintentionally block unrelated paths on the same hostname.
Actual behavior
The URL is centrally blocked before DOM access. The user's Always allow setting does not override the result, and no permission prompt or Auto-review is attempted.
Additional diagnostics
Local diagnostics indicate that Browser Use checks the current URL with OpenAI's Aura site-status service before executing the DOM command.
The request includes the full path and query string, but the Browser Use client caches the result by normalized hostname for 24 hours. This may cause a path-specific decision to overblock other pages on campus.163.com.
The failed tool result contains only the URL-policy error. It contains no target-site HTTP status, response headers, DOM, body, or screenshot, which indicates that the observed failure happens before the requested page inspection.
Computer Use's local runtime also contains an AuraSiteStatusURLPolicyChecker, consistent with both browser surfaces applying the same class of URL-policy check.
Related general report: #29343
Feedback ID: 01a0327f-6ae5-7791-9621-62819048115f
Related task: 01a029cd-bdfa-7542-b05d-0c40d8905881
Activity
github-actions commentedon Aug 24, 2026
Potential duplicates detected. Please review them and close your issue if it is a duplicate.
Powered by Codex Action
naoy00n commentedon Sep 19, 2026
Has the runtime owner confirmed the cause of this site-safety denial or a supported diagnostic/re-review path? I am investigating a potentially related report in ChatGPT Work's Cloud browser, not the macOS extension/Desktop environment described above, so I am not asserting a duplicate or shared implementation.
Sanitized observations from September 18–19, 2026:
net::ERR_BLOCKED_BY_CLIENT; a subsequent tool response explicitly identified Cloud browser URL policy as the blocking layer.Questions:
Exact demo hostname, private repository links, account identifiers, credentials, cookies, screenshots and raw logs are intentionally omitted. No internal runtime inspection was performed. Please point to the correct reporting channel if this thread is Desktop-only.
leixyou commentedon Sep 20, 2026
This matches the cloud
site_status/ site-safety check (allowlisting the origin in Settings does not override it). Browser Use callshttps://chatgpt.com/backend-api/aura/site_statusand fails closed with “not permitted” on hosts like campus.163.com.The bundled plugin already has a local-testing flag that skips that check:
BROWSER_USE_SECURITY_MODE=disabled-for-local-testing. I wrapped that into a small third-party helper (macOS): wrapnode_repl, optional origin allowlists, re-apply after ChatGPT updates.Repo: https://github.com/leixyou/bypass-codex-site-safety
Not affiliated with OpenAI. Does not MITM chatgpt.com or patch
browser-service.mjs. After install, start a new Codex thread. Computer Use has a separate “current Chrome URL is not allowed” kill switch this does not cover.