Audit runtime JavaScript exceptions, CSP violations, Web Worker errors, mixed content, and failed HTTP requests across full web pages and XML sitemaps.
Audit runtime JavaScript exceptions, CSP violations, Web Worker errors, mixed content, and failed HTTP requests across full web pages and XML sitemaps.
Simultaneously listens to Playwright console/pageerror events, context weberrors, Chrome DevTools Protocol Audits & Log domains, and DOM mixed content.
Intercepts Content Security Policy violations and W3C Trusted Types DOM sink violations via deep Chrome DevTools Protocol Audits domain events.
Uses Playwright worker inspection to differentiate console errors originating from dedicated Web Workers and Service Workers from the main window.
Audits active mixed content (scripts, styles, iframes) and passive mixed content (images, audio, video) plus insecure form actions transmitting in plaintext.
Auto-detects sitemap XML URLs, uncompresses gzip .xml.gz streams, unpacks nested sitemap indexes, and audits child URLs up to user limit.
Auto-dismisses cookie consent banners (TCF v2.2 & Google Consent Mode v2) and simulates smooth lazy-scroll to trigger IntersectionObserver handlers.
Templates & workflows
Audit critical landing pages and checkout flows for JavaScript runtime exceptions, failed subresource requests, and console warnings.
{
"urls": "https://www.browsermesh.in/\nhttps://example.com/checkout",
"limit": 50,
"timeout": 35,
"concurrency": 4,
"consoleLevel": "warn",
"acceptConsent": true,
"filterAdNoise": true,
"triggerLazyLoad": true,
"checkMixedContent": true,
"captureCspViolations": true,
"captureNetworkFailures": true
}Ingest an XML sitemap to automatically discover and crawl site pages, auditing network drops, ORB blocks, and hydration errors in parallel.
{
"urls": "https://www.browsermesh.in/sitemap.xml",
"limit": -1,
"timeout": 35,
"concurrency": 4,
"consoleLevel": "warn",
"acceptConsent": true,
"filterAdNoise": true,
"maxSitemapPages": 50,
"triggerLazyLoad": true,
"checkMixedContent": true,
"captureCspViolations": true,
"captureNetworkFailures": true
}Audit HTTPS origins for active and passive mixed content, insecure HTTP form submission endpoints, and Content Security Policy enforce blocks.
{
"urls": "https://example.com/login\nhttps://example.com/account",
"limit": -1,
"timeout": 30,
"concurrency": 4,
"consoleLevel": "all",
"acceptConsent": true,
"filterAdNoise": true,
"triggerLazyLoad": false,
"checkMixedContent": true,
"captureCspViolations": true,
"captureNetworkFailures": true
}Console Error & Network Failure Detector: JavaScript & Site Reliability Auditor
An enterprise-grade, high-throughput JavaScript Console Error, Uncaught Exception, Chrome DevTools Protocol (CDP) Security Issue & Network Failure Auditor for BrowserMesh.
Automatically crawls and audits client-side JavaScript execution, catches silent unhandled runtime exceptions (TypeError, ReferenceError, syntax errors), attributes logs across Web Worker threads and the main window, intercepts Chrome DevTools Protocol (CDP) Content Security Policy (CSP Level 3) & Trusted Types violations, detects Opaque Response Blocking (ORB v0.2) & Private Network Access (PNA) blocks, audits mixed content (W3C Level 2 active and passive HTTP subresources), monitors subresource HTTP 4xx/5xx status codes, and flags Chromium connection failures (net::ERR_*) across single webpage URLs or entire auto-expanded XML sitemaps.
The ultimate automated QA and technical SEO alternative to manual Chrome DevTools inspection, expensive Application Performance Monitoring (APM) agents (Datadog RUM, Sentry, LogRocket), and brittle Cypress/Selenium test suites.
<form action> endpoints on HTTPS origins).In modern web architecture (Next.js, Nuxt, React 19, Vue, Angular, SvelteKit), client-side execution directly controls organic search rankings and conversion funnels:
width and height dimensions on lazy-loaded images trigger massive layout shifts, degrading Google PageSpeed Insights and Core Web Vitals scores.page.on('console'): Captures console.error, console.warn, console.info, and console.debug. Uses msg.worker() to accurately attribute logs to background Web Workers or the main execution thread.page.on('pageerror'): Intercepts unhandled JavaScript runtime exceptions that crash execution threads (which Chromium bypasses in standard console streams).page.on('response'): Evaluates subresource HTTP statuses (4xx/5xx) and tracks same-domain payload transfer sizes.page.on('requestfailed'): Intercepts Chromium network-layer failures (net::ERR_*).context.on('weberror'): Catches context-wide unhandled errors across background iframes, ad frames, and crashed worker threads.Audits.enable & Audits.issueAdded: Intercepts ContentSecurityPolicyIssue, GenericIssue (form input autocomplete violations), DeprecationIssue, MixedContentIssue, and Trusted Types policy violations.Log.enable & Log.entryAdded: Captures low-level browser engine interventions, security warnings, unused preload notices, and deprecation notices.<script src="http://...">, <form action="http://...">).autocomplete attributes and lazy-loaded images missing explicit width/height dimensions (CLS layout shift prevention).<link rel="preload"> assets not consumed above the fold.performance.getEntriesByType('navigation')).net::ERR_* & Security Taxonomynet::ERR_BLOCKED_BY_ORB: Flags Opaque Response Blocking (ORB v0.2) when cross-origin resources lack appropriate CORS headers or carry mismatched MIME types.net::ERR_BLOCKED_BY_PRIVATE_NETWORK_ACCESS_CHECKS: Intercepts Private Network Access (PNA) preflight failures.net::ERR_NAME_NOT_RESOLVED / net::ERR_CONNECTION_REFUSED: Flags DNS resolution failures and unreachable host servers.net::ERR_CERT_* / net::ERR_SSL_VERSION_OR_CIPHER_MISMATCH: Detects expired, misconfigured, or untrusted SSL/TLS certificates.net::ERR_QUIC_PROTOCOL_ERROR / net::ERR_HTTP2_PROTOCOL_ERROR: Detects HTTP/3 or HTTP/2 transport corruption.net::ERR_ABORTED on canceled non-critical images/fonts is filtered out to eliminate false alarms.<form action="http://..."> submitting user data over cleartext HTTP. Severity: Warning (-10 pts).Accurately detects React 19 and Next.js 15+ Server Component hydration mismatch diff warnings, differentiating them from fatal unhandled component crashes.
OneTrust.AllowAll(), UC_UI.acceptAllConsents(), Cookiebot.submitCustomConsent(), dataLayer.push()) and clicks consent buttons to test unblocked scripts.IntersectionObserver handlers and lazy-loaded scripts before returning to top.Starts at 100 points, subtracts weighted deductions, enforces Category Safety Caps, applies Severity Ceiling Caps, and assigns a letter grade:
https://example.com/sitemap.xml) or gzipped sitemap (.xml.gz) to recursively unpack child sitemaps and audit catalog pages with concurrency./sitemap_index.xml, /wp-sitemap.xml) or falls back to crawling homepage internal links.[Site Audit Summary] rollup record so users never have to guess offset limits.Every yielded record strictly adheres to these 25 structured fields:
schema.ts){
"url": "https://www.browsermesh.in/",
"domain": "www.browsermesh.in",
"statusCode": 200,
"status": "clean",
"healthScore": 100,
"grade": "A",
"totalErrors": 0,
"totalWarnings": 0,
"consoleErrors": [],
"consoleWarnings": [],
"uncaughtExceptions": [],
"failedRequests": [],
"httpErrorResponses": [],
"cspViolations": [],
"mixedContentIssues": [],
"corsErrors": [],
"pageSizeBytes": 1420500,
"requestCount": 42,
"loadTimeMs": 950,
"domContentLoadedMs": 420,
"requestsSummary": {
"total": 42,
"successful": 42,
"failed": 0,
"totalTransferBytes": 1420500,
"slowRequestCount": 0,
"byType": {
"document": 1,
"script": 18,
"stylesheet": 6,
"image": 12,
"font": 5
},
"byStatus": {
"200": 42
}
},
"slowRequests": [],
"networkRequests": [],
"audit": {
"score": 100,
"grade": "A",
"status": "clean",
"summary": {
"totalErrors": 0,
"totalWarnings": 0,
"uncaughtExceptions": 0,
"failedRequests": 0,
"http5xxErrors": 0,
"http404Errors": 0,
"cspViolations": 0,
"mixedContentIssues": 0,
"orbBlockedResources": 0,
"corsErrors": 0
},
"deductions": [],
"recommendations": [
"All client scripts and network resources executed cleanly with zero errors."
]
},
"error": null
}
Googlebot uses the Web Rendering Service (WRS) based on Chromium. Because rendering JavaScript requires substantial computing resources, Google allocates a finite rendering budget per URL. If an uncaught JavaScript error throws during initial hydration, script execution halts. Critical elementsβsuch as client-rendered text, internal navigation links, image galleries, and JSON-LD schema markupβare never injected into the DOM, causing Google to index an incomplete or blank page.
Sentry and LogRocket are Application Performance Monitoring (APM) tools that require installing an SDK directly into your production application code. They only capture errors when real users trigger them. BrowserMesh is an external synthetic auditor powered by headless Chromium: it requires zero code changes or SDKs, audits staging or production sites proactively, unpacks entire XML sitemaps automatically, and runs synthetic user flows before customers experience bugs.
net::ERR_BLOCKED_BY_ORB and how do I resolve it?Opaque Response Blocking (ORB) is Chromium's modern security standard that supersedes CORB. It prevents cross-origin data leaks by blocking cross-origin read requests (such as images, scripts, or API fetches) that lack proper Access-Control-Allow-Origin headers or serve mismatched MIME types (e.g., serving HTML with an image/png header). BrowserMesh detects ORB blocks and provides actionable remediation steps in the audit recommendations.
Does this detector catch React 19 and Next.js SSR hydration mismatches?
Yes. BrowserMesh monitors Chrome DevTools Protocol console events for React 18/19 and Next.js 14/15 hydration diff notices (Hydration failed because the server-rendered HTML didn't match the client). It classifies these as diagnostic warnings rather than fatal crashes, allowing frontend teams to maintain clean SSR hydration.
This workflow executes natively within your local or peer BrowserMesh node using real Chromium browser automation. It navigates dynamically rendered single-page applications, executes interaction logic, avoids cloud proxy fees, and extracts clean structured datasets directly to your local machine with complete security and privacy.
Unlike legacy cloud scraping APIs that impose expensive per-request markups and risk IP bans, BrowserMesh routes execution through authentic residential environments. You pay zero cloud data transfer fees, experience full anti-bot stealth emulation, and retain 100% ownership of your extracted datasets without vendor lock-in.
2 records Β· 22 nested fields Β· real execution preview
Combine complementary browser automation and auditing workflows to verify site health, infrastructure, and search engine crawlability with 100% local execution.
Scan websites and XML sitemaps to detect 404 dead links, broken anchors, and redirect loops with zero cloud markups.
Discover who hosts any website. Detect cloud infrastructure, CDN edge networks, IP geo, and DNS routing instantly.
Audit on-page SEO factors, meta tags, heading structures, Core Web Vitals, and SERP snippet previews with local privacy.
Explore our comprehensive guides or reach out directly to our engineering support team.