[Windows][IAB] Taobao rejected by site-safety gate before approval on app 26.1013.4894.0 #54950

What version of the Codex App are you using?

26.1013.4894.0, reported by the official codex doctor desktop-app version check, rather than read from the About dialog. Diagnostic CLI: 0.163.0-alpha.10.2.

What subscription do you have?

Personal account, confirmed by the user; exact subscription tier not recorded.

What platform is your computer?

Windows. Browser Use is using the desktop application's in-app browser (IAB).

What issue are you seeing?

A normal, user-authorized attempt to open and inspect https://www.taobao.com/ through the supported Browser Use interface is rejected before page content can be observed. No user-permission prompt or Auto-review is attempted.

The relevant tool error is:

Browser Use rejected this action due to browser security policy.
The site-safety policy blocks this action; no user permission prompt or Auto-review was attempted.
Browser use could not acquire authority to observe page content.
The site safety gate did not grant access for https://www.taobao.com.
Site safety policy blocked this URL.

What steps can reproduce the bug?

1. Use Browser Use with the desktop application's in-app browser.
2. Have the account owner authorize opening and inspecting the Taobao homepage.
3. Open https://www.taobao.com/ through the normal supported browser tool.
4. Observe the site-safety refusal before page inspection or an approval opportunity.

An earlier user-provided settings screenshot showed default browsing and downloading set to Always allow, with no visible custom denial for this site. This is a screenshot observation, not a newly captured effective-policy snapshot.

What is the expected behavior?

Please confirm whether this origin is intentionally unsupported or needs classification review. If access is eligible, provide a supported recovery process. If restricted intentionally, expose an actionable reason and review path that distinguish this site-safety refusal from ordinary user website permissions, login failures, or browser connectivity problems.

Additional information

• The documented system requirements.toml and legacy managed_config.toml were absent. The checked user configuration had no matching site/default deny rule.
• Official diagnostics reported successful configuration loading and desktop app-server initialization. They found no locally visible recent security enforcement, but did not inspect active-chat overrides. These results do not rule out cloud, service-side, or session policy.
• The exact rule source and classification rationale remain unconfirmed. No security policy or local-testing setting was changed, and no alternate browser, raw CDP, script, or private interface was used to bypass the refusal.
• Related reports: [Windows][Browser Use] Taobao blocked by site-safety policy despite explicit Always allow permission #44943 and [Windows][Browser Use] Taobao read-only product collection blocked before approval despite Always allow #53349. Those reports describe Chrome/extension reproductions; this report adds the current desktop IAB path and app-version evidence. Please consolidate with an existing issue if appropriate.
• No location, timezone, private identifiers, account contents, screenshots, raw logs, or conversation transcript are attached.