Fixes a real fingerprint leak found by expanding detection coverage beyond bot.sannysoft.com.
Fix
The default locale: 'ko-KR' overrode navigator.languages on the main thread only — workers kept Chrome's real language list. That main/worker mismatch made deviceandbrowserinfo.com report hasInconsistentWorkerValues: true → isBot: true. Locale is now unset by default (still available as an opt-in option, with a documented caveat that setting it reintroduces the worker tell).
Verified (macOS, headed Chrome, residential IP)
Fingerprint detectors:
- bot.sannysoft.com — 6/6 real checks pass
- bot-detector.rebrowser.net — runtime-enable leak clean
- deviceandbrowserinfo.com — "human" (
isBot: false) ✅ fixed - browserscan.net — "Normal"
Real sites (initial page load):
- X, Threads, Coupang, Amazon, AliExpress — load, no CAPTCHA
- Instagram — expected login wall (auth wall, not a fingerprint failure)
Scope note
Verified as single-hit loads from a clean residential IP. Does NOT defeat IP-reputation, behavioral, or login walls; heavy scraping or datacenter/proxy IPs may behave differently.