Behavior Changes
- A WebSocket the outbound policy refuses fails the conversion with
--chromium-proxy-server. That proxy replaces Gotenberg's pinning proxy, the only layer that cuts off a WebSocket handshake, so a page could open a WebSocket to an address--chromium-deny-private-ips,--chromium-deny-public-ipsor the deny-list refuses, and Gotenberg only logged it. The conversion now fails with a generic403, as it already did for a deny rule that names a path. A Web Worker's WebSockets still reach your proxy unchecked: enforce the policy there too. Thanks @manus-pi.