search

paulirish / headless-cat-n-mouse

Is headless chrome currently detectable? Let's pit the detections and detection evasions against eachother.
Apache License 2.0
646 stars 56 forks source link

detect with toString #11

Closed JoelEinbinder closed 6 years ago

JoelEinbinder commented 6 years ago

Found you!

JoelEinbinder commented 6 years ago

It detects protocol

paulirish commented 6 years ago

oh boy.

antoinevastel commented 6 years ago

There is the same problem with navigator.webdriver that is also present in non headless mode. It depends if the goal is to detect only Chrome headless, or more globally automated Chrome.

paulirish commented 6 years ago

There is the same problem with navigator.webdriver that is also present in non headless mode. It depends if the goal is to detect only Chrome headless, or more globally automated Chrome.

@antoinevastel Good call. I added some comments on this one and webdriver to describe that they are adjacent detects: a6a2c89503727ad4bd26b7932ad52bfcabd21e7f

Also fwiw, the navigator.webdriver object is created if either --headless or --enable-automation is provided: https://cs.chromium.org/chromium/src/content/child/runtime_features.cc?type=cs&q=f:runtime_features.cc+WebRuntimeFeatures::EnableAutomationControlled&sq=package:chromium&l=147