Add HTTP_SEC_CH_UA as possible header to detect crawler

JayBizzle · Sep 9, 2024 · 886219a · 886219a
1 parent 275002e
commit 886219a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/Fixtures/Headers.php b/src/Fixtures/Headers.php
@@ -33,5 +33,7 @@ class Headers extends AbstractProvider
         // Sometimes, bots (especially Google) use a genuine user agent, but fill this header in with their email address
         'HTTP_FROM',
         'HTTP_X_SCANNER', // Seen in use by Netsparker
+        // Observed that Facebook will omit identifying itself in User Agent headers but will persist HeadlessChrome in this header for mobile requests
+        'HTTP_SEC_CH_UA',
     );
 }