Quoted proxy credentials generate invalid Chrome extension JavaScript

Author: potatosipsCreated Jul 20, 2026Updated Jul 20, 2026

Have you checked our README?

  • I have checked the README

Have you followed our Troubleshooting?

  • I have followed your Troubleshooting

Is there already an issue for your problem?

  • I have checked older issues, open and closed

Have you checked the discussions?

  • I have read the Discussions

Have you ACTUALLY checked all these?

YES

Environment

markdown
- FlareSolverr version: master at 0f05ed8fc974b215c36892b5a30122e27fe3c671
- Last working FlareSolverr version: unknown
- Operating system: Windows 11 (unit-level reproducer)
- Are you using Docker: no
- FlareSolverr User-Agent (see log traces or / endpoint): not applicable
- Are you using a VPN: no
- Are you using a Proxy: yes
- URL to test this issue: any target through a proxy with quote-containing credentials

Description

Description

The proxy-extension generator interpolates the proxy URL and credentials directly into generated JavaScript. Quotes, backslashes, or newlines in proxy credentials make background.js syntactically invalid; unescaped content can also change the generated script.

Expected behaviour

Arbitrary proxy credential strings should be represented as JavaScript string values and passed unchanged to Chrome's proxy-auth callback.

Proposed fix

Build the proxy configuration and credential objects in Python and serialize them with json.dumps before embedding them in the extension. A focused regression test uses quote-containing values and verifies the generated script has valid serialized configuration.

Logged Error Messages

No server log is required; Chrome rejects the generated extension script when the injected JavaScript is invalid.

Screenshots

No response

Source: FlareSolverr/FlareSolverr