fingerprintjs / BotD

Bot detection library that runs in the browser. Detects automation tools and frameworks. No server required, runs 100% on the client. MIT license, no usage restrictions.
https://fingerprintjs.github.io/BotD/main/
MIT License
994 stars 77 forks source link

False positive with Chameleon extension #171

Closed AJGranowski closed 4 weeks ago

AJGranowski commented 1 month ago

The Chameleon extension overwrites navigator.plugins, causing this check to fail and falsely flag as a headless chrome bot. Changing that line to return true causes BotD to correctly return a not-bot result with Chameleon enabled.

Environment

Firefox 128.0 (64-bit) on Windows 10

Related to chameleon#586.

AJGranowski commented 1 month ago

It seems that BotD doesn't support spoofs, and that Chameleon is planning to address this from their side.

Feel free to close this issue.