[Desktop][Browser] Allowed website remains blocked by a saved permission preference
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 45/100
Research direction
Reproduce the issue in the Windows desktop app using the built-in Browser, starting with Settings → Browser → Website permissions for https://play.google.com. Compare the saved View permission with the Browser Use permission state across a fresh session and app restart. Done means an allowed View permission permits inspection, or an absent valid permission triggers a new request instead of applying a stale denial.
Written by the indexing model from the issue text.
Description
Summary
In the Windows desktop app, the built-in Browser shows https://play.google.com as allowed, but Browser Use consistently rejects read access because it sees a saved blocking preference.
The permissions UI and the Browser Use permission state appear to be out of sync.
Steps to reproduce
- Open and sign in to Google Play Console in the built-in browser.
- Open Settings → Browser → Website permissions.
- Set View, Download, and Upload to Allow for
https://play.google.com, then save the settings. - Ask Codex to inspect the open Play Console tab.
- Restart the desktop app and repeat the test with a fresh browser session.
Actual result
Every attempt to read the page is rejected immediately with this message:
Browser Use rejected this action due to browser security policy.
Reason: A saved user permission setting blocks this action.
Browser use cannot access https://play.google.com because the user has a saved preference that blocks it.
No new permission prompt appears.
The result is the same after:
- saving the site permission again;
- removing and recreating the permission;
- fully restarting the desktop app;
- opening a fresh built-in browser session;
- testing both the Play Console application list and an application dashboard.
Expected result
When View is set to Allow, Codex should be able to inspect the page. If no valid permission is stored, the desktop app should show a new permission request instead of silently applying a stale denial.
Impact
Authenticated browser workflows on the affected hostname cannot proceed. The safety error also correctly prevents switching to another browser surface as a workaround, so there is no automated recovery path.
Environment
- ChatGPT/Codex desktop app on Windows
- Built-in Browser plugin
- Authenticated Google Play Console session
No account identifiers, private Play Console URLs, cookies, credentials, or session logs are included in this report.
- Dominant language
- Rust
- Stars
- 125k
- Forks
- 19.5k
- Avg merge
- 1m
- Merged PRs (30d)
- 1k
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from openai/codex
-
enhancement remote
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
bug CLI windows-os
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
-
macOS sandbox blocks hw.optional.arm64 sysctl, causing Flutter to misdetect Apple Silicon as x64 Openbug CLI sandbox
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
bug CLI TUI
Difficulty 2/5 1-3 hours Newbie friendliness 90/100
-
CLI config enhancement skills
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
kwakseongjae/auto-hwp#319 ·
-
area:cli bug filter-quality good first issue priority:medium
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
-
Difficulty 1/5 Under an hour Newbie friendliness 72/100
bevyengine/bevy#25861 ·
-
comp-datalake
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
ClickHouse/ClickHouse#121222 ·
-
A-linter
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
oxc-project/oxc#26863 ·