Browser Agent Security Guide

from os import environ
from urllib.parse import urlparse

from anthale import Anthale

client = Anthale(api_key=environ["ANTHALE_API_KEY"])
BROWSER_POLICY_ID = environ["ANTHALE_BROWSER_POLICY_ID"]

ALLOWED_DOMAINS = {"docs.anthale.com", "support.example.com"}
HIGH_IMPACT_ACTIONS = {"submit_form", "purchase", "delete_record"}

def prepare_browser_context(browser_result: dict, approved: bool) -> dict:
hostname = urlparse(browser_result["url"]).hostname
if hostname not in ALLOWED_DOMAINS:
raise RuntimeError("The browser destination is not allowlisted.")

    response = client.organizations.policies.enforce(
        policy_identifier=BROWSER_POLICY_ID,
        direction="input",
        messages=[{"role": "user", "content": browser_result["text"]}],
        metadata={
            "boundary": "browser_output",
            "feature": "support-agent",
            "sourceType": "browser",
            "url": browser_result["url"],
        },
    )
    if response.action == "block":
        raise RuntimeError("Anthale blocked the browser content.")

    if browser_result["next_action"] in HIGH_IMPACT_ACTIONS and not approved:
        raise RuntimeError("High-impact browser actions require approval.")

    safe_messages = response.redacted_messages if response.action == "redact" else [{"content": browser_result["text"]}]
    return {
        "url": browser_result["url"],
        "safe_text": safe_messages[0]["content"],
        "next_action": browser_result["next_action"],
    }

import Anthale from "anthale"

const client = new Anthale({ apiKey: process.env.ANTHALE_API_KEY })
const BROWSER_POLICY_ID = process.env.ANTHALE_BROWSER_POLICY_ID!

const ALLOWED_DOMAINS = new Set(["docs.anthale.com", "support.example.com"])
const HIGH_IMPACT_ACTIONS = new Set(["submit_form", "purchase", "delete_record"])

type BrowserResult = {
  url: string
  text: string
  next_action: string
}

export async function prepareBrowserContext(browserResult: BrowserResult, approved: boolean): Promise<BrowserResult> {
  const hostname = new URL(browserResult.url).hostname
  if (!ALLOWED_DOMAINS.has(hostname)) {
    throw new Error("The browser destination is not allowlisted.")
  }

  const response = await client.organizations.policies.enforce(BROWSER_POLICY_ID, {
    direction: "input",
    messages: [{ role: "user", content: browserResult.text }],
    metadata: {
      boundary: "browser_output",
      feature: "support-agent",
      sourceType: "browser",
      url: browserResult.url,
    },
  })

  if (response.action === "block") {
    throw new Error("Anthale blocked the browser content.")
  }

  if (HIGH_IMPACT_ACTIONS.has(browserResult.next_action) && !approved) {
    throw new Error("High-impact browser actions require approval.")
  }

  const safeMessages = response.action === "redact" ? response.redacted_messages : [{ content: browserResult.text }]

  return {
    url: browserResult.url,
    next_action: browserResult.next_action,
    text: safeMessages[0].content,
  }
}