Browser navigation, downloads, URL policy and network destination risks.
Assess browser-agent navigation, downloads, form submission, session and network controls.
Review URL allowlists for wildcards, local-file schemes and private-network destinations.