Skip to content

Release/4.10.1 - #1500

Merged
Peter Perlepes (igneel64) merged 4 commits into
masterfrom
release/4.10.1
Aug 19, 2026
Merged

Peter Perlepes (igneel64) merged 4 commits into
masterfrom
release/4.10.1

Conversation

@igneel64

@igneel64 Peter Perlepes (igneel64) commented Aug 18, 2026

Copy link
Copy Markdown
Contributor

Nick (stanch) and others added 3 commits August 18, 2026 16:11
…ngth detector

BotD's `detectPluginsLengthInconsistency` reports any non-Android Chromium
browser with `navigator.plugins.length === 0` as headless Chrome. Chrome's
`--headless=new` mode now reports plugins like a headed browser, while
privacy-focused browsers legitimately report none, so the check only yields
false positives.

Rather than patch the dependency, compose BotD's exported `collect`/`detect`
with our own detector set. A pnpm patch would only reach the UMD build, since
the ESM build keeps `@fingerprintjs/botd` external and npm consumers would
resolve their own unpatched copy.

Mirrors fingerprintjs/BotD#194, which is approved
upstream but unmerged and so absent from botd 2.0.0.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@wiz-2cefcfbd9e

wiz-2cefcfbd9e Bot commented Aug 19, 2026

Copy link
Copy Markdown

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities -
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations 1 Low
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 1 Low

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

@stanch Nick (stanch) left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM but obviously one of the included PRs is mine so not sure I should be approving :D

@igneel64
Peter Perlepes (igneel64) merged commit 9584819 into master Aug 19, 2026
8 checks passed
@igneel64
Peter Perlepes (igneel64) deleted the release/4.10.1 branch August 19, 2026 14:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants