Skip to content
All fingerprint checks
Automation surface

No debugger client attached to this tab after it loaded

Pim· Clearcote Research 2 min readCheck id console-replay-trap

The counter is 0: no DevTools-protocol client enabled Runtime on this tab after it loaded. Information only, because DevTools opened by a person counts too (severity: info).

What a detector infers

V8 keeps the console messages a page logs, which is why DevTools can show messages logged before it was opened. When any DevTools-protocol client enables the Runtime domain, the stored messages are replayed to it, and to describe a stored Error argument V8 formats its stack — which calls the page's Error.prepareStackTrace hook if there is one. An inline script at the top of the page installs a counting hook and logs one Error at load, and the audit reads the counter later.

Any client that enabled Runtime on this tab at any point since load has left a mark, including one that disabled it again immediately — the enable-then-disable sequence some modified automation libraries use so that live probes find nothing attached.

Measured 0 on Chrome, Edge and Linux Chrome with nothing attached, and 1 under a Playwright launch, under Playwright attaching with connectOverCDP after the page had loaded, under puppeteer-extra-plugin-stealth, and after a bare Runtime.enable followed by Runtime.disable. It is information only, like runtime-enable-leak and console-preview-proxy-trap, because a person who opens DevTools trips it too, as do extensions that use chrome.debugger.

Those rows ask whether a client is attached now; this one asks whether one ever was.

How to resolve it

Nothing to fix for a person with DevTools open. For an automation client, the mark is made at the moment Runtime is enabled, so disabling it afterwards does not remove it; only a client that never enables Runtime on the tab leaves the counter at 0.

How automation gets caught, layer by layer

Nearby checks in Automation surface

See all 53 checks in Automation surface
Who builds this test

Clearcote is a browser built for fingerprint coherence

It is a Chromium fork, maintained by the same people who wrote this reference. It ships as a compiled browser rather than as a stealth script injected into someone else's — which is a description of how it is built, and is not an argument about how it behaves on this check.

This audit takes no position on how Clearcote scores on Automation surface checks, on this one, or anywhere else. It has no baseline corpus of other people's fingerprints to rank you against and no vendor scoreboard — nearly every check is self-referential, asking one browser the same question through two independent APIs and reporting whether both answers can be true at once. It runs identically on any browser, including ours. Run it on yours and read the result yourself.

See the other checks in Automation surface — the family console-replay-trap belongs to.