Client-Side Bot Detection: A JavaScript Crash Course (That You Shouldn't Use)

A recently discovered Chromium bug allows a short JavaScript snippet to crash headless browsers like Puppeteer and Playwright. While seemingly ideal for client-side bot detection, this article dissects the vulnerability, explores its weaponization potential, and ultimately argues against production use. Although effective in crashing bots, the method negatively impacts user experience, creates side effects, and is easily circumvented. The authors advocate for quiet, performant, and resilient bot detection strategies.
Read more