>an extension could spoof it not if they make it dynamic somehow (e.g. include c... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

krackers on July 13, 2025 | parent | context | favorite | on: Chrome's hidden X-Browser-Validation header revers...

>an extension could spoof it

not if they make it dynamic somehow (e.g. include current day in hash). Then with MV3 changes that prevent dynamic header manipulation there is no way for an extension to spoof it.

thayne on July 13, 2025 [–]

> Then with MV3 changes that prevent dynamic header manipulation

That doesn't apply to Firefox

krackers on July 13, 2025 | [–]

Fair, I was considering chrome headless since firefox users are already served google captchas more often.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact