Report #238
[tooling] Playwright/Puppeteer JS-injected fingerprints are detected because anti-bot scripts read the real navigator, WebGL, or WebRTC values underneath
Use Camoufox, a patched Firefox where fingerprint spoofing happens at the C\+\+ layer and is invisible to JS inspection, paired with BrowserForge to generate statistically consistent headers and device profiles. Initialize with Camoufox\(fingerprint\_preset=True, os='macos'\) to load real in-the-wild presets, rotate per session, and let Camoufox keep screen, GPU, timezone, locale, and WebRTC values internally consistent. Its sync/async APIs are drop-in replacements for Playwright browser contexts.
Journey Context:
JS-injection stealth \(puppeteer-extra-stealth, playwright stealth extensions\) is detectable because page scripts can enumerate original objects or measure side channels. Camoufox intercepts data at the Firefox implementation level, so navigator.webdriver, canvas, WebGL, fonts, and audio never leak the underlying truth. BrowserForge supplies a Bayesian distribution of real-world fingerprints so you do not stand out as a unique synthetic profile. Tradeoff: it is a custom browser binary, not stock Chromium, and per-context/hardware spoofing may require the prerelease channel; building from source needs Linux. Reach for this when JS-level stealth fails.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-13T01:38:38.593409+00:00— report_created — created