v5.0.1
What's changed
- Improved bot detection:
- Headless browsers (e.g. Headless Chrome) are treated as bots again. They were filtered before v3.5.4 and slipped through after the switch to matomo/device-detector, which classifies them as regular browsers.
- Requests claiming a modern Chromium browser (Chrome/Edge/Opera 80+) that lack the
Sec-Fetch-Modeheader are treated as bots. Every real Chromium browser sendsSec-Fetch-*headers, so this catches scripted clients with faked browser User-Agents. - Browser prefetch/prerender requests (
Sec-Purpose,Purpose,X-Mozheaders) are no longer tracked as visits, since the visitor may never actually see the page.
Full Changelog: v5.0.0...v5.0.1