fixes

Author: maticzav

browser_use/browser/profile.py

@@ -561,7 +561,7 @@ class BrowserProfile(BrowserConnectArgs, BrowserLaunchPersistentContextArgs, Bro
 	)
 	prohibited_domains: list[str] | None = Field(
 		default=None,
-		description='List of prohibited domains for navigation e.g. ["*.google.com", "https://example.com", "chrome-extension://*"]',
+		description='List of prohibited domains for navigation e.g. ["*.google.com", "https://example.com", "chrome-extension://*"]. Allowed domains take precedence over prohibited domains.',
 	)
 	keep_alive: bool | None = Field(default=None, description='Keep browser alive after agent run.')
 

browser_use/browser/watchdogs/security_watchdog.py

@@ -161,6 +161,7 @@ def _is_url_allowed(self, url: str) -> bool:
 
 			return False
 
+		# Check each prohibited domain pattern
 		if self.browser_session.browser_profile.prohibited_domains:
 			for pattern in self.browser_session.browser_profile.prohibited_domains:
 				if self._is_url_match(url, host, parsed.scheme, pattern):