[Webkit-unassigned] [Bug 243135] New: WebKitGTK based browser detected as bot by botguard

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=243135

            Bug ID: 243135
           Summary: WebKitGTK based browser detected as bot by botguard
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKitGTK
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: Cloud11665 at gmail.com
                CC: bugs-noreply at webkitgtk.org

botguard (https://www.humansecurity.com/products/botguard-applications) marks WebKitGTK browsers as bots (tested on both Epiphany and a simple WebKitGTK project).

Steps to reproduce:
- go to https://soundcloud.com
- try to log in
after entering your password, you will get prompted with "Our robots think you are a robot. Try reloading the page. If you continue to have this problem, please visit our Help center.". Doing any of the recomended steps doesn't solve the issue.
I'll be creating a ticket on SoundCloud's end, but I doubt it will get resolved, because it'd require them to "reduce" their "security" in order to support a very small subset of browsers.

>From what I have found, the issue lies in the way that those 3rd party solutions rely on deprecated features like Navigator.plugins (https://developer.mozilla.org/en-US/docs/Web/API/Navigator/plugins) and others, which can be seen in bot-tests like https://bot.sannysoft.com and https://arh.antoinevastel.com/bots.

PS: I've stumbled upon https://github.com/berstend/puppeteer-extra/tree/master/packages/puppeteer-extra-plugin-stealth, which (although for puppeteer) is a great source of information on what these services use to determine whether something is a bot or not.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220723/6e126e44/attachment.htm>