Skip to content

fix: stop scoring two checks that fire on real browsers - #130

Merged
cport1 merged 1 commit into
mainfrom
fix/real-browser-false-positives
Oct 13, 2026
Merged

cport1 merged 1 commit into
mainfrom
fix/real-browser-false-positives

Conversation

@cport1

@cport1 cport1 commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

Two detections fire for ordinary visitors on real browsers:

  • Console-attach probe (cdpRuntime.consoleAttached, cdp 0.6): fired in every real Chrome and Safari session measured, with DevTools closed and extensions disabled. Still collected by the client, no longer scored.
  • "Modern macOS UA but SF Pro font not detected" (bot 0.3): SF Pro is not exposed to pages by name, so hasSFPro is false on every Mac. Chrome and Safari were skipped by the 10_15 exclusion; Firefox's UA says 10.15, so every Firefox on macOS was flagged. Removed. Mac font coherence is still covered by hasMenlo in input forensics.

Applied to Go, Node and Python. Unit tests and cross-server conformance pass on all three.

The console-attach probe fired in every real Chrome and Safari session
measured, with no DevTools open and extensions disabled. The SF Pro check
flagged every Firefox on macOS: browsers do not expose SF Pro by name, and
only Firefox's frozen "10.15" UA slipped past the version exclusion.

Co-Authored-By: Claude <noreply@anthropic.com>
@codecov-commenter

Copy link
Copy Markdown

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@cport1
cport1 merged commit 5859f2f into main Oct 13, 2026
25 checks passed
@cport1
cport1 deleted the fix/real-browser-false-positives branch October 13, 2026 22:59
cport1 added a commit that referenced this pull request Oct 14, 2026
The console-attach probe fired in every real Chrome and Safari session
measured, with no DevTools open and extensions disabled. The SF Pro check
flagged every Firefox on macOS: browsers do not expose SF Pro by name, and
only Firefox's frozen "10.15" UA slipped past the version exclusion.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants