-
Notifications
You must be signed in to change notification settings - Fork 221
how to extract data from canvas charts playwright
To extract data from a canvas chart with Playwright, read one of the two places the
numbers exist before they are painted: the network response the page fetched to build the
chart, or the chart library's in-memory JavaScript state read with page.evaluate. Do not
read the pixels - a <canvas> or WebGL chart is a bitmap with no DOM nodes, so selectors
return nothing, and on a stealth browser the pixels are perturbed on purpose.
You point a selector at a chart and get nothing back. The axis labels are there in the DOM, maybe a legend, but the bars, the line, the values you actually came for return an empty list. This is not a timing problem and waiting longer will not fix it.
A chart drawn to a <canvas> or through WebGL has no DOM nodes to read. Every bar, point
and label inside the plot area is painted as pixels, and the numbers themselves live only
in the chart library's in-memory JavaScript state. There is no element to query because
there is no element. This page is the three places the data actually is, in the order you
should try them, and one honest caveat specific to a stealth browser: reading the pixels
back is the one approach that is actively wrong here.
The selector returns nothing because a canvas or WebGL chart paints every bar, line and
label as pixels on a single <canvas> element with no child nodes - there is no element
for page.query_selector_all to find, no matter how long you wait. An HTML chart and a
canvas chart look identical on screen and are completely different underneath.
An SVG or HTML chart builds a node per mark: a <rect> per bar, a <path> per line, a
<text> per label. Those are in the DOM, so page.query_selector_all finds them and you
read attributes off them. A canvas chart calls drawing commands - fillRect, lineTo,
fillText - against a single <canvas> element. The result is a bitmap. The <canvas>
is one node with a width and a height and no children, and the two hundred data points
inside it are pixels with no structure a selector can address.
So the data is in exactly two recoverable places: the network response the page fetched to build the chart, and the JavaScript object the chart library keeps in memory. Reach either and you get typed numbers. Reach for the pixels and you get a bitmap you would have to reverse a rendering out of, which is both fragile and, on this browser specifically, corrupted on purpose.
The chart was drawn from data the page fetched, almost always as JSON over an XHR or
fetch call. That response is the cleanest possible source: typed fields, full precision,
every series including the ones the chart truncated or hid.
Attach a listener before you navigate, then let the page load normally.
from invisible_playwright import InvisiblePlaywright
captured = []
with InvisiblePlaywright(seed=42) as browser:
page = browser.new_page()
def on_response(response):
url = response.url
if "/api/" in url and "chart" in url:
try:
captured.append(response.json())
except Exception:
pass
page.on("response", on_response)
page.goto("https://example.com/dashboard")
page.wait_for_load_state("networkidle")
for payload in captured:
print(payload)You do not have to guess the URL up front. Run it once with the browser visible, open the
network panel, and find the request whose response holds the series. Filter to that path
and you have the numbers with no parsing at all. The full set of interception patterns,
including page.route and why aborting images to "save bandwidth" is a recognizable
automation cadence, is in
how to capture XHR and API responses.
Sometimes there is no clean endpoint: the data is inlined into the initial HTML, computed
client-side, or streamed over a websocket you cannot easily reassemble. In that case the
values are still sitting in the chart instance's memory, and page.evaluate runs
JavaScript inside the page where that object lives.
Most charting libraries either hang the instance off the canvas element or expose a registry of live charts. The shape below is common: a library that lets you recover the instance from the canvas node and read its parsed datasets back out.
with InvisiblePlaywright(seed=42) as browser:
page = browser.new_page()
page.goto("https://example.com/report")
page.wait_for_selector("canvas")
series = page.evaluate(
"""
() => {
const canvas = document.querySelector('canvas');
// Many libraries expose a lookup from a canvas to its live instance.
const chart = window.Chart && window.Chart.getChart
? window.Chart.getChart(canvas)
: null;
if (!chart) return null;
return chart.data.datasets.map(d => ({
label: d.label,
values: d.data,
}));
}
"""
)
print(series)The exact property path depends on the library, and you find it the same way you find the
endpoint: open the page by hand, inspect the global the library registers, and walk to the
parsed series. Two practical notes. Wait for the chart to finish drawing before you read,
because the instance and its data exist only after the library has run - wait_for_selector
on the canvas plus a short settle is usually enough. And return plain data, arrays and
objects, never the chart instance itself, since only serializable values cross back out of
page.evaluate.
This path never touches pixels, which is the point of the next section.
The tempting third option is to screenshot the canvas and read the numbers out of the
image, or to call getImageData and infer bar heights from colored columns. Avoid it on
any browser: it is fragile, resolution-dependent, and turns a data-extraction job into a
computer-vision job. On this browser it is not merely fragile, it is defeated by design.
This project defends against canvas fingerprinting by adding a tiny, seed-deterministic per-pixel perturbation to what canvas readback returns. The change is imperceptible to a human and stable for a given seed, and it exists so a detector cannot use the exact bytes of a rendered canvas as a stable machine identifier. The mechanism and what it protects are covered in canvas fingerprint noise.
The consequence for scraping is direct: any approach that recovers chart values from
returned pixels is reading through that perturbation, so the numbers you reconstruct are
wrong in a way that is hard to notice and impossible to trust. The same behavior is why
a screenshot of a canvas comes back subtly noised
rather than byte-identical. This is not a limitation to route around - it is the reason the
data endpoint and the JS-state approaches are the correct ones. Both read the numbers
before they were ever drawn, so the canvas spoof does not touch them at all: page.evaluate
reaching the chart object works on the library's parsed data, which is upstream of every
pixel.
Put plainly: the noise corrupts the one method you should not have been using, and leaves the two you should.
Occasionally the only source is the tooltip: the endpoint is obfuscated, the library exposes nothing useful on the global, and the exact value appears only when a human hovers a point. You can drive that with human-like mouse movement and sample the tooltip text after each move.
with InvisiblePlaywright(seed=42) as browser:
page = browser.new_page()
page.goto("https://example.com/graph")
box = page.locator("canvas").bounding_box()
readings = []
steps = 20
for i in range(1, steps):
x = box["x"] + box["width"] * i / steps
y = box["y"] + box["height"] / 2
page.mouse.move(x, y) # arcs there on a Bezier curve
page.wait_for_timeout(120)
tip = page.locator(".chart-tooltip")
if tip.count() and tip.is_visible():
readings.append(tip.inner_text())
print(readings)This is the slowest and least reliable of the three, and it samples rather than reads: you get whatever points your hover happens to land on, at the precision the tooltip prints. Treat it as a last resort. Its one merit is that the tooltip is real DOM text, so no pixel reading is involved and the canvas spoof is irrelevant to it. Because the mouse motion follows a Bezier arc rather than teleporting between coordinates, the hover sampling also does not itself read as automation, which matters on a page watching pointer behavior.
A canvas chart has no DOM to scrape, so stop asking selectors for marks that were never
elements. The numbers exist in two clean places before they are ever painted: the JSON the
page fetched, and the chart library's in-memory state. Read the endpoint first, drop to
page.evaluate against the chart object when there is no endpoint, and reach for tooltip
sampling only when both fail.
Reading pixels is the wrong tool everywhere and a broken tool here, because the per-pixel anti-fingerprint noise is designed to make canvas readback non-identical. That is a feature working as intended, and it points you at the better data all along.
Why does my selector return nothing on a chart? Because the chart is drawn to a
<canvas> or WebGL, which is a single node with no children. The marks are pixels and the
values are in JavaScript memory, so there is no element to select.
How do I get the numbers out of a canvas chart? Read the data endpoint the page
fetched, or read the chart library's live instance with page.evaluate. Both give you
typed values without touching pixels.
Can I just screenshot the chart and read it? You can, but do not. It is fragile on any browser, and on this one the canvas carries seed-deterministic anti-fingerprint noise, so pixel readback is corrupted by design and your reconstructed numbers will be wrong.
Does the canvas spoof affect page.evaluate reaching the chart object? No. The spoof only perturbs pixel readback. Reading the library's parsed datasets happens upstream of any drawing, so it is untouched.
What if there is no data endpoint and no useful global? Sample the tooltips by moving the pointer across the plot and reading the tooltip text after each move. It is a last resort: you get sampled points at tooltip precision, not the full series.
How do I find the right endpoint or JS object? Run once with the browser visible, inspect the network panel for the request holding the series, and inspect the global the chart library registers. Pin a seed so the run is reproducible while you explore.
- The stock Playwright API surfaced unchanged by this wrapper:
page.on("response")andpage.route, documented in the official Playwright network guide, pluspage.evaluate, documented in evaluating JavaScript, andpage.mouse.move. - This project's canvas anti-fingerprint behavior, whose per-pixel perturbation is exactly why pixel-based chart reading fails here, covered in the two canvas pages linked below.
See also: how to capture XHR and API responses for the endpoint-first workflow in full, canvas fingerprint noise for why pixel readback is perturbed, and why a canvas screenshot comes back noised for the same mechanism seen from the screenshot side.
Written while maintaining invisible_playwright, a Firefox patched at the C++ level driven by stock Playwright. The endpoint-first order on this page is the one that survives both a markup change and this browser's own canvas defense.
Documentation
Guides
-
Browser Identity
- navigator.webdriver is not the tell you think it is
- hardwareConcurrency, deviceMemory and storage quota
- Screen size and viewport tells in headless browsers
- Playwright headless vs headed: what detectors see
- Playwright User Agent: Why You Should Not Set It
- Client Hints and Sec-Fetch: headers that must agree
- Codec fingerprinting: canPlayType and MediaCapabilities
- Permissions API: the two answers that must agree
- CSS fingerprinting: what media queries reveal
- What privacy.resistFingerprinting actually does
- speechSynthesis.getVoices() returns an empty array
- Browser extensions are a fingerprint surface
- BFCache and pageshow.persisted under browser automation
- Service workers, storage partitioning and automation
- Web Workers: where page-level fingerprint patches fail
- fake-useragent is archived: what changes and what doesn't
- navigator.buildID and the stale build date tell
- navigator.maxTouchPoints and pointer consistency
- navigator.platform and oscpu on a spoofed OS
- navigator.vendor and productSub: the Firefox tells
- Accept-Language header vs navigator.languages
- window.devicePixelRatio: the pref that spoofs it
- Can you be fingerprinted in incognito mode?
- Is changing the user agent enough to avoid detection?
- Can a website tell you are running on a server?
- Can two devices share a browser fingerprint?
- Does clearing cookies stop fingerprint tracking?
- Color-gamut and HDR media queries as a fingerprint
- Battery API fingerprint: does Firefox expose it?
- Is navigator.connection a fingerprint in Firefox?
- Can the Gamepad API fingerprint or detect a bot?
- Do accelerometer and gyroscope APIs leak on desktop?
- prefers-reduced-motion and other OS-setting tells
- Does storage quota estimate reveal disk size?
- Can scrollbar width reveal my operating system?
-
Canvas, WebGL, Fonts and Audio
- Canvas fingerprint noise: why per-call randomising fails
- Firefox WebGL renderer strings: what ANGLE reports
- WebGL parameters: the numbers are the same on every GPU
- Your renderer string says NVIDIA. Your pixels say software.
- Why headless browsers render different fonts
- How to make Linux and macOS report real Windows fonts
- measureText and TextMetrics as a fingerprinting surface
- AudioContext fingerprinting, and why adding noise backfired
- Canvas and WebGL fingerprints, identical across OSes
- Emoji fingerprinting: why emoji look the same on any OS
- Detecting installed fonts in JavaScript by width
- WebGL shader precision as a fingerprint surface
- AudioContext sampleRate and latency as a fingerprint
- Is WebGPU a browser fingerprint?
-
Network, Proxy and WebRTC
- WebRTC leak with a proxy in Playwright and Selenium
- WebRTC ICE candidate spoofing: the fields that give it away
- Playwright proxy in Python: per-context, and what leaks
- Playwright proxy not working? SOCKS5 auth in Python
- Playwright timezone does not match the proxy IP
- JA3 and JA4: why a TLS fingerprint cannot be patched
- Playwright in Docker: it runs, and still gets blocked
- Web scraping keeps getting blocked with good proxies
- Python web scraping blocked? The TLS fingerprint reason
- SOCKS5 vs HTTP proxy: what each does in the browser
- WebRTC IPv6 leak: why a proxy does not stop it
- HTTP/2 fingerprint: the layer above the TLS handshake
- TLS fingerprint vs User-Agent: the contradiction
- WebRTC has no ICE candidates behind a proxy
- WebRTC IP that matches the proxy exit, by design
- How to check if a proxy leaks your real IP
- about:webrtc: read your real ICE candidates
- Offline timezone resolution from a proxy exit IP
- Residential vs datacenter vs mobile proxies explained
- Sticky vs rotating proxy sessions: which to use
- Does a proxy leak DNS? DoH and DNS leaks explained
- HTTP/3 and QUIC fingerprint: what a site sees
- What is ASN and IP reputation in bot detection?
- What does a mobile carrier IP look like to a site?
- IPv6 vs IPv4: which does your proxy expose?
- Geolocation API vs IP location: keep them consistent
- Does chaining two proxies help avoid detection?
-
The Automation Layer
- Function.prototype.toString and the [native code] check
- The ChromeDriver
cdc_variable, and why renaming it fails - Why an attached debugger makes automation detectable
- Execution context was destroyed, and when it means detection
- Human-like mouse movement: Bezier curves are the easy part
- Why a Playwright upgrade broke 97 of 133 tests overnight
- Playwright persistent profile: what it fixes and breaks
- Why humanized mouse movement can fail on hover()
- Why content_frame() returns None for a cross-origin iframe
- Orphaned Firefox processes on Windows: the killed-runner leak
- Firefox launches but Playwright can't drive it: packaging gap
- Why automating login is riskier than reusing a session
- Playwright new_page vs new_context: the viewport tell
- Playwright dialog and popup handling without a tell
- Playwright download files with Firefox and the tell
- Playwright connect_over_cdp does not work with Firefox
- Playwright mobile emulation on Firefox and isMobile
- Playwright isTrusted: are automated clicks real?
- Playwright set_input_files uploads and the tell
- Can websites detect Playwright? What is actually visible
- Does Playwright Set navigator.webdriver to True?
- Does Playwright Leave Traces a Website Can See?
- Does Playwright Change My Browser Fingerprint?
- Can I Use My Real Browser Profile With Playwright?
- Does Playwright Support Firefox Stealth?
- Is Playwright Firefox Harder to Detect Than Chromium?
- Does Playwright Get Detected on the First Request?
- Why Playwright's bundled Firefox is easy to detect
- ghost-cursor human mouse paths with Playwright
- Stock Playwright, patched Firefox: how they connect
- Intercept and mock network requests with page.route
- Record and replay HTTP traffic with HAR in Playwright
- Record a Playwright trace to debug a failed scrape
- Record a video of a Playwright browser session
- Save and reuse login with storage_state in Playwright
- Read and set cookies in a Playwright context
- Set geolocation and permissions per Playwright context
- Handle HTTP basic auth in Playwright (http_credentials)
- Isolate identities with a browser context per session
- Drag and drop elements in Playwright with drag_to
- When to use an HTTP client vs a real browser
- Migrating from requests + BeautifulSoup to a browser
-
AI Agents and Frameworks
- AI browser agents and stealth: what fits and what does not
- browser-use gets detected: what you can and cannot change
- crawl4ai stealth mode and custom browser engines
- Give a LangChain agent an invisible_playwright browser
- Feed invisible_playwright pages into a RAG index
- Computer-use agents and browser fingerprint detection
- Give an MCP browser server a stealth Firefox engine
- Give each AI agent a reproducible browser identity
- Run parallel browser agents with distinct fingerprints
- Why AI browser agents have their own timing signal
- Running an AI browser agent headless on a server
- Give a browser agent a persistent logged-in session
- smolagents: hand the agent an invisible_playwright tool
- Stagehand and stealth: why a Firefox engine won't drop in
- DOM-reading vs screenshot agents: which stealth helps
- Back a computer-use agent with a real browser engine
- AI agent retry loops trip rate limits, not fingerprints
-
Detectors, Explained
- What bot.sannysoft.com actually checks, row by row
- How CreepJS decides you are lying
- What BotD actually detects, and what it does not
- Why a FingerprintJS visitor ID changes
- reCAPTCHA v3 score: why a fresh browser scores badly
- BrowserLeaks canvas and WebGL hash, explained
- What BrowserLeaks actually tests, surface by surface
- Browser trust scores explained: what the number means
- How do websites detect bots?
- What is a browser fingerprint?
- What data does a website collect about your browser?
- Does a VPN stop browser fingerprinting?
- Do websites know you are using a script?
- How accurate is browser fingerprinting?
- Can a website detect a virtual machine?
- Can websites detect a datacenter or proxy IP?
- getClientRects fingerprinting: subpixel geometry as ID
- Notification.permission as a bot-detection signal
- speechSynthesis voices as a cross-platform fingerprint
- Can a website detect typing by keystroke timing?
- Can a website detect Clipboard API access?
- What are mouse-dynamics behavioural biometrics?
-
Testing and Troubleshooting
- How to test bot detection without a false pass
- Playwright detected as a bot: the checklist to fix it
- Firefox preferences that silently do nothing
- Slow browser launch: a per-request timeout is not a budget
- Playwright screenshot returns noise: readback fix
- Canvas fingerprint changes every run: use a seed
- Playwright TargetClosedError: the causes and the fixes
- Why am I blocked with a clean fingerprint?
- Why Does My Playwright Script Get Blocked?
- Is Playwright headless detectable? What sites check
- Can You Run Playwright Without Being Detected?
- Why Playwright Works Locally but Fails in the Cloud
- Does Playwright Trigger reCAPTCHA More Often?
-
Scraping with Playwright
- How to scrape without getting blocked
- How to scrape a site that blocks headless browsers
- How to scrape infinite scroll pages with Playwright
- How to rotate proxies when scraping with Playwright
- How to scrape data behind a login with Playwright
- How to run Playwright in Docker without getting detected
- How to use invisible_playwright in Docker
- Playwright bot detection: how to avoid it in Python
- How to scrape paginated pages with Playwright
- How to download files with Playwright
- How to upload files with Playwright, and verify it landed
- How to handle cookie consent banners in Playwright
- How to handle popups and modals in Playwright
- How to take full-page screenshots with Playwright
- How to generate a PDF with Playwright and Firefox
- How to wait for content to load in Playwright
- How to retry failed requests when scraping Playwright
- How to scrape pages in parallel with Playwright
- How to rate limit your own Playwright scraper
- How to scrape HTML tables with Playwright
- How to scrape iframe content with Playwright
- How to scrape shadow DOM content with Playwright
- How to capture XHR and API responses in Playwright
- How to scrape geotargeted content with Playwright
- How to scrape real estate listings with Playwright
- How to scrape job postings with Playwright
- How to scrape e-commerce product pages with Playwright
- How to track product prices with Playwright
- How to scrape hotel room prices with Playwright
- How to scrape flight prices with Playwright
- How to scrape classifieds listings with Playwright
- How to scrape vacation rental listings with Playwright
- How to scrape car listings with Playwright
- How to scrape apartment rentals with Playwright
- How to track product stock and restocks with Playwright
- How to scrape location-based store prices with Playwright
- How to scrape flexible-date fare calendars with Playwright
- How to scrape product reviews with Playwright
- How to scrape reviews and ratings with Playwright
- How to scrape news article text with Playwright
- How to scrape business directory listings with Playwright
- How to scrape event and ticket listings with Playwright
- How to scrape restaurant menu data with Playwright
- How to scrape stock and financial data with Playwright
- How to scrape social media profiles with Playwright
- How to scrape forum and community threads with Playwright
- How to scrape image galleries with Playwright
- How to scrape video listings and metadata with Playwright
- How to scrape map-based local results with Playwright
- How to scrape sports scores and stats with Playwright
- How to scrape cryptocurrency prices with Playwright
- How to scrape deals and coupon codes with Playwright
- How to scrape to CSV with Playwright
- How to scrape to JSON Lines with Playwright
- How to scrape into a SQLite database with Playwright
- How to export scraped data to Excel with Playwright
- How to extract JSON-LD structured data with Playwright
- How to extract Open Graph and meta tags with Playwright
- How to extract links and build a crawl frontier in Playwright
- How to scrape RSS and Atom feeds with Playwright
- How to download images in bulk with Playwright
- How to extract clean article text with Playwright
- How to scrape a sitemap.xml with Playwright
- How to scrape into a pandas DataFrame with Playwright
- How to clean scraped prices and dates with Playwright
- Scrape search results by driving a form in Playwright
- Scrape a map-based search with Playwright
- Scrape autocomplete and typeahead inputs with Playwright
- Scrape date-picker calendars with Playwright
- Crawl list pages to detail pages with Playwright
- Scrape lazy-loaded images with Playwright
- Extract data from canvas charts with Playwright
- Scrape a multi-step wizard flow with Playwright
- How to resume an interrupted scrape with Playwright
- Incremental scraping: only new items since last run
- Handle 403 and 429 backoff mid-scrape in Playwright
- Scrape load-more button pages with Playwright
- Scrape nested pagination with Playwright
- Scrape an SPA that changes URL via history API
- Use BeautifulSoup with invisible_playwright
- Run stealth Playwright tests with pytest fixtures
- Run invisible_playwright concurrently with asyncio
- Run invisible_playwright in GitHub Actions CI
- Can you run invisible_playwright serverless?
- Run invisible_playwright in Celery task workers
- Schedule invisible_playwright scrapes with cron
- Run invisible_playwright headful on a server with Xvfb
- Use invisible_playwright in an Airflow DAG
- Combine invisible_playwright with httpx for speed
- Wrap invisible_playwright in a FastAPI service
- Run invisible_playwright in a Jupyter notebook
- Block images to speed up scraping (and when not to)
- Wait for a specific API response in Playwright
Comparisons
- Playwright stealth in Python: three levels that work
- Firefox or Chromium for anti-detect automation
- Chromium is not Chrome, and detectors know the difference
- Playwright stealth vs Camoufox: two patched Firefoxes
- Playwright stealth vs Patchright: driver vs engine
- Playwright stealth vs undetected-chromedriver and nodriver
- playwright-stealth vs a patched engine: page vs browser
- puppeteer-extra-plugin-stealth: unmaintained since 2024
- selenium-stealth hasn't been updated since December 2021
- pyppeteer's own maintainer says to switch to Playwright
- invisible_playwright vs rebrowser-patches: the same CDP fix
- invisible_playwright vs fingerprint-suite: injection vs engine
- invisible_playwright vs playwright-with-fingerprints
- invisible_playwright vs Scrapling
- invisible_playwright vs Ulixee Hero
- invisible_playwright vs SeleniumBase UC Mode
- Splash is unmaintained, and it was never a real browser
- invisible_playwright vs DrissionPage
- WebDriver BiDi vs CDP: does the new protocol hide you
- invisible_playwright vs hrequests
- zendriver vs invisible_playwright: Chrome CDP vs Firefox
- botasaurus vs invisible_playwright: framework vs library
- curl_cffi vs invisible_playwright: TLS client vs browser
- pydoll vs invisible_playwright: CDP without a driver
- selenium-driverless vs invisible_playwright stealth
- puppeteer-real-browser vs invisible_playwright
- Migrating from Selenium to Playwright for stealth
- Migrating from Puppeteer to Playwright for stealth
- undetected-chromedriver vs a patched Firefox browser
- scrapy-playwright vs a patched Firefox for stealth
- playwright-extra stealth plugins vs a patched browser
- tls-client vs a real browser: when TLS is enough
- Anti-detect browser or Playwright stealth: which you need
- undetected-playwright vs a patched Firefox binary
Integrations
- Using invisible_playwright with CodeceptJS
- Using invisible_playwright with Crawlee for Python
- Using invisible_playwright with Crawlee for JavaScript
- Using invisible_playwright with scrapy-playwright
- Using invisible_playwright with Robot Framework Browser
- Cypress, WebdriverIO, TestCafe and Nightwatch integration
- Using invisible_playwright with Microsoft's Playwright MCP
- Using the engine from Go, Java, C#, Ruby and Rust
docs/ source folder