Some Anti devtool scripts redirect to other domain, returning no cookie while challenge is correctly resolved

[FreeOoI]

Have you checked our README?

• I have checked the README

Have you followed our Troubleshooting?

• I have followed your Troubleshooting

Is there already an issue for your problem?

• I have checked older issues, open and closed

Have you checked the discussions?

• I have read the Discussions

Environment

- FlareSolverr version: 3.3.11
- Last working FlareSolverr version: the one that doesn't open devtool
- Operating system: Ubuntu
- Are you using Docker: yes
- FlareSolverr User-Agent : Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
- Are you using a VPN: no
- Are you using a Proxy: no
- Are you using Captcha Solver: no
- URL to test this issue: doesn't matter

Description

If a website use a script like https://github.com/theajack/disable-devtool , it detects devtool window open and redirect to another domain resulting to unwanted values for ->solution (empty solution->cookie is the main problem).

It should keep the last values from the domain challenged or disabling client url redirection if the domain is different from the requested one.

Logged Error Messages

[solution] => 
(
	[url] => https://theajack.github.io/disable-devtool/404.html?h=<url-challenged>
	[status] => 200
	[cookies] => Array
	(
	)

	[userAgent] => Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
)

Screenshots

No response

[ilike2burnthing]

While previously we opened devtools as part of a workaround (9c62410), that was reverted in f7e434c and 22ed3d3, so I don't know what that script is detecting, nor what you mean by the one that doesn't open devtool.

[FreeOoI]

Ok, didn't know it was reverted, but this anti devtool detect as if.
Anyway. The important thing is, if a script (like this one) redirect to another domain, it removes values of what we are searching for to be returned (cf cookies / content).
This script can be an anti flaresolverr even if it was not built for.

[pokemaster974]

Ok, didn't know it was reverted, but this anti devtool detect as if. Anyway. The important thing is, if a script (like this one) redirect to another domain, it removes values of what we are searching for to be returned (cf cookies / content). This script can be an anti flaresolverr even if it was not built for.

Are you sure ? In my case, with latest version (3.3.15) my DevTools is always open (headless=false) :

[ilike2burnthing]

800866d

[pokemaster974]

800866d

Do we have possibility to manually not adding the argument --auto-open-devtools-for-tabs (without changing the utils.py of course) ?
Because it seems that this fix @tadasgedgaudas focuses the windows almost every new POST request and I can't use my computer at the same time. With this option, I will try if FS could success or not to pass CF without the devtools opened.

If needed to open a new issue about this, I will open.

[ilike2burnthing]

You can revert to the last release, but it's basically non-functional. Otherwise, just don't run as headless=false.