f18cd1d314
The f1-stream verifier's in-process headless Chromium kept tripping hmembeds' disable-devtool.js Performance detector (CDP latency on console.log vs console.table) and getting redirected to google.com. This adds a single-replica chrome-service stack running Playwright launch-server under Xvfb so callers can connect via WS+token to a shared headed browser. f1-stream's _ensure_browser now prefers chromium.connect(CHROME_WS_URL/CHROME_WS_TOKEN) and adds a vendored stealth init script (webdriver/plugins/languages/Permissions/WebGL spoofs + querySelector hijack to disarm disable-devtool-auto) on every new context. Falls back to in-process headless if the env vars aren't set. Encrypted PVC for profile + npm cache, NetworkPolicy to TCP/3000 gated by client-namespace label, 6h tar.gz backup CronJob to NFS, Authentik-gated nginx sidecar at chrome.viktorbarzin.me for human liveness checks. Image pinned to playwright:v1.48.0-noble in lockstep with the Python client's playwright==1.48.0. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
43 lines
1.9 KiB
Python
43 lines
1.9 KiB
Python
"""Vendored Playwright stealth init script.
|
|
|
|
Mirror of `stacks/chrome-service/files/stealth.js`. Kept in sync by hand
|
|
— update both files together if the JS is changed.
|
|
"""
|
|
|
|
STEALTH_JS = r"""
|
|
(() => {
|
|
Object.defineProperty(Navigator.prototype, 'webdriver', { get: () => undefined });
|
|
if (!window.chrome) window.chrome = {};
|
|
window.chrome.runtime = window.chrome.runtime || {};
|
|
Object.defineProperty(navigator, 'plugins', {
|
|
get: () => [{ name: 'Chrome PDF Plugin' }, { name: 'Chrome PDF Viewer' }, { name: 'Native Client' }],
|
|
});
|
|
Object.defineProperty(navigator, 'languages', { get: () => ['en-US', 'en'] });
|
|
const origQuery = window.navigator.permissions && window.navigator.permissions.query;
|
|
if (origQuery) {
|
|
window.navigator.permissions.query = (parameters) =>
|
|
parameters && parameters.name === 'notifications'
|
|
? Promise.resolve({ state: Notification.permission })
|
|
: origQuery(parameters);
|
|
}
|
|
const spoofGl = (proto) => {
|
|
if (!proto) return;
|
|
const orig = proto.getParameter;
|
|
proto.getParameter = function (parameter) {
|
|
if (parameter === 37445) return 'Intel Inc.';
|
|
if (parameter === 37446) return 'Intel Iris OpenGL Engine';
|
|
return orig.apply(this, arguments);
|
|
};
|
|
};
|
|
spoofGl(window.WebGLRenderingContext && window.WebGLRenderingContext.prototype);
|
|
spoofGl(window.WebGL2RenderingContext && window.WebGL2RenderingContext.prototype);
|
|
// disable-devtool.js auto-init evasion: hide the marker attribute so the
|
|
// library's IIFE exits early. Without this, hmembeds-class players redirect
|
|
// to google.com when the Performance detector trips under Playwright.
|
|
const origQS = Document.prototype.querySelector;
|
|
Document.prototype.querySelector = function (sel) {
|
|
if (typeof sel === 'string' && sel.indexOf('disable-devtool-auto') !== -1) return null;
|
|
return origQS.apply(this, arguments);
|
|
};
|
|
})();
|
|
"""
|