Block navigation to the internal HTTP proxy path

Editor assessment

This commit patches CVE-2026-103922. The subject is specific: it names the defense (block navigation) and the target (the internal HTTP proxy path), and the type is correct. The body is empty, so the reader never learns which attack the proxy path enabled or where the check is enforced. Clear enough to scan, thin as an explanation. Structurally valid and scannable; the absent body is the only gap, leaving the attack and enforcement point in the diff. The enforcement point is never named; adding 'in the WebView navigation handler' would have made the subject plus body self-contained.