app/browser.md +29 −1
18 18
19Treat page content as untrusted context. Don't paste secrets into browser flows.19Treat page content as untrusted context. Don't paste secrets into browser flows.
20 20
2121<CodexScreenshot
22 alt="Codex app showing a browser comment on a local web app preview"
23 lightSrc="/images/codex/app/in-app-browser-light.webp"
24 darkSrc="/images/codex/app/in-app-browser-dark.webp"
25 maxHeight="420px"
26 variant="no-wallpaper"
27/>
28
29## Browser use
30
31Browser use lets Codex operate the in-app browser directly. Use it for local
32development servers and file-backed previews when Codex needs to click, type,
33inspect rendered state, take screenshots, or verify a fix in the page.
34
35To use it, install and enable the Browser plugin. Then ask Codex to use the
36browser in your task, or reference it directly with `@Browser`. The app keeps
37browser use inside the in-app browser and lets you manage allowed and blocked
38websites from settings.
39
40Example:
41
42```text
43Use the browser to open http://localhost:3000/settings, reproduce the layout
44bug, and fix only the overflowing controls.
45```
46
47Codex asks before using a website unless you've allowed it. Removing a site from
48the allowed list means Codex asks again before using it; removing a site from the
49blocked list means Codex can ask again instead of treating it as blocked.
22 50
23## Preview a page51## Preview a page
24 52