navigator.pdfViewerEnabled is true
true on a desktop Chrome profile with the built-in viewer; false or absent is legitimate on mobile, WebKit, or policy-restricted builds.
What a detector infers
A direct read of `navigator.pdfViewerEnabled`. It is N/A when the property is not exposed at all, passes when true, and is marked false otherwise — at 'info' severity, so it is contextual and not scored. On its own the flag proves little: false is entirely normal on mobile Chrome, on WebKit, and wherever enterprise policy disables the built-in viewer.
Its real job in this audit is to supply the premise for the plugins check above, which only demands a populated plugin array when this flag claims a viewer exists. Read the two lines together, not separately.
How to resolve it
No fix required in isolation — this is a reading, not a verdict. Only act on it if it contradicts the plugin list (see has-plugins) or the platform you are presenting.
Read in the wild by
PerimeterX / HUMAN
Collects navigator.pdfViewerEnabled as its own boolean field, in the same payload that separately carries the navigator.plugins name list and plugin count.
main.min.js ([internal reference]): `t[0][hQ(877)]=hU.pdfViewerEnabled`, where hQ(877)="JxcSHWJ3FCY=" — PX_SDK_Reverse_Engineering.md:1647 `| 130 | JxcSHWJ3FCY= | boolean | true | - | hQ(877) |`. Same EV2 payload, field 91 — PX_SDK_Reverse_Engineering.md:1608 `| 91 | T386NQoaPg4= | object | ["PDF Viewer","Chrome PDF Viewer","Chromium PDF Viewer"] | 8022 | plain |`, populated by CC(), which pushes `hU[hQ(382)][i].name` over `hU.plugins.length` (hQ(382)="plugins").
CreepJS
CreepJS, a research demo rather than a production detector, reads navigator.pdfViewerEnabled and counts a false reading toward its "like headless" rating.
src/headless/index.ts — inside the `likeHeadless` object: `pdfIsDisabled: ('pdfViewerEnabled' in navigator && navigator.pdfViewerEnabled === false)`, scored via `likeHeadlessRating = +((likeHeadlessKeys.filter((key) => likeHeadless[key]).length / likeHeadlessKeys.length) * 100).toFixed(0)`
Every attribution traces to a published artifact. See the sources and their limits.
Nearby checks in Environment & locale
- Intl timezone resolves
timezone-presentThis check reads Intl.DateTimeFormat().resolvedOptions().timeZone and records it alongside -new Date().getTimezoneOffset() and… - timezone is not UTC
timezone-not-utcThe check resolves the Intl zone and fails only when it is exactly 'UTC' or 'Etc/UTC'. - IANA zone offset matches the JS clock offset (incl. across DST)
timezone-offset-coherenceThis is a two-source cross-check on the same fact. It takes the resolved IANA zone, formats the current instant through Intl.DateTimeFormat… - navigator.plugins is consistent with the PDF viewer
has-pluginsAn empty navigator.plugins is only meaningful when it contradicts something else, and this check is written to respect that. - mimeTypes are consistent with navigator.plugins
plugins-mimetypesThis walks navigator.mimeTypes, and for each entry reads .enabledPlugin and checks that the exact object is present in a Set built from… - an enabled PDF viewer exposes exactly the specified plugin set
pdf-plugin-set-cardinalityA deployed commercial agent devotes four separate signals to this one small area: the plugin count, a plugin presence bit, the mime-type… - proprietary codecs (H.264 / AAC) present for a Chrome UA
codec-supportThe check calls canPlayType on a video and audio element for H.264 ('avc1.42E01E') and AAC ('mp4a.40.2'), plus MP4/WebM/Ogg for context, and… - Blink-only Web APIs present for a Chrome UA
blink-web-apisWhen the UA matches Chrome/\d+ and the page is a secure context, this probes four Blink-only surfaces: navigator.connection…
Clearcote is a browser built for fingerprint coherence
It is a Chromium fork, maintained by the same people who wrote this reference. It ships as a compiled browser rather than as a stealth script injected into someone else's — which is a description of how it is built, and is not an argument about how it behaves on this check.
This audit takes no position on how Clearcote scores on Environment & locale checks, on this one, or anywhere else. It has no baseline corpus of other people's fingerprints to rank you against and no vendor scoreboard — nearly every check is self-referential, asking one browser the same question through two independent APIs and reporting whether both answers can be true at once. It runs identically on any browser, including ours. Run it on yours and read the result yourself.
See the other checks in Environment & locale — the family pdf-viewer belongs to.
