test: add fpscanner + CreepJS to the offline real-detector gate

Alongside BotD and FingerprintJS, the detector e2e now runs two more FOSS
client-side detectors against the binary, vendored and served from localhost so it
stays offline on CI. fpscanner: assert its engine-agnostic bot rules (webdriver/
selenium/bot-UA/platform/timezone/language) are clean. CreepJS (the Firefox-aware
one): runs fully offline via window.Fingerprint with every non-loopback request
aborted, asserting headlessRating==0 and no JS-proxy stealth tell. The Chrome-only
and GPU-sensitive signals are logged, not asserted, so a software-WebGL CI host
doesn't false-red. Validated against firefox-10: full e2e 130 green.
This commit is contained in:
feder-cr
2026-06-11 20:19:19 +02:00
parent 3f2834d8c2
commit 090baa6155
4 changed files with 11125 additions and 33 deletions
+9710
View File
File diff suppressed because one or more lines are too long