fix: audit pass — WebRTC audit, HTTPS gate, leak compare, kill-switch guard, doc backlog

proxy_chain_manager/leak_audit.py

@@ -141,14 +141,29 @@ def _check_webrtc_policy() -> tuple[bool, str]:
         r"SOFTWARE\Policies\Google\Chrome",
         r"SOFTWARE\Policies\Microsoft\Edge",
     )
+    _DWORD_DISABLE = 3  # disable_non_proxied_udp
+    _STR_KEY = "WebRtcIPHandling"
+    _STR_DISABLE = "disable_non_proxied_udp"
     found = []
     for p in paths:
         try:
             with winreg.OpenKey(
                 winreg.HKEY_LOCAL_MACHINE, p, 0, winreg.KEY_QUERY_VALUE
             ) as key:
-                v = int(winreg.QueryValueEx(key, "DefaultWebRtcIpHandlingPolicy")[0])
-                if v == 2:
+                ok = False
+                try:
+                    v = int(winreg.QueryValueEx(key, "DefaultWebRtcIpHandlingPolicy")[0])
+                    if v == _DWORD_DISABLE:
+                        ok = True
+                except OSError:
+                    pass
+                try:
+                    v_str = str(winreg.QueryValueEx(key, _STR_KEY)[0]).strip().lower()
+                    if v_str == _STR_DISABLE:
+                        ok = True
+                except OSError:
+                    pass
+                if ok:
                     found.append(p.split("\\")[-1])
         except OSError:
             continue