search

paulirish / headless-cat-n-mouse

Is headless chrome currently detectable? Let's pit the detections and detection evasions against eachother.
Apache License 2.0
645 stars 56 forks source link

Add permissions.query to `__proto__` to fool `hasOwnProperty` #6

Closed FWeinb closed 6 years ago

FWeinb commented 6 years ago

Simple fix to fool hasOwnProperty. This can still be detected by the method described in #1.

This would still leak the function overwrite because window.navigator.permissions.query.toString.toString() would evaluate to _ => 'function query() { [native code] }' instead of function toString() { [native code] }. See: http://jsbin.com/vokoboloqu/1/edit?js,console

paulirish commented 6 years ago

nice!