The way this works: that the program locates chrome executable, launches it in a special mode, chrome prints which port it allocated for that instance to stdout

The way this works: that the program locates chrome executable, launches it in a special mode, chrome prints which port it allocated for that instance to stdout, the program parses stdout to find the port and opens websocket connection. See: https://github.com/zserge/lorca/blob/master/chrome.go#L50 https://github.com/zserge/lorca/blob/master/chrome.go#L50 How would that be intercepted? Only the program that launches that chrome instance can read chrome's stdout. It's no more or less secure than the same concern with a regular Chrome.