- Validate protocol client methods against RFC 3986, rejecting non‑conforming protocol names.
- Fix Windows requestSingleInstanceLock additionalData truncation/deserialization issue.
- Correct handling of invalid characters in custom protocols/webRequest headers and fix origin reporting for permission and device chooser handlers.