Merge pull request 'fix(tradein-browser): camoufox hardening — block_images/webrtc + форс МСК tz (#1796 )' (#1798 ) from fix/tradein-browser-camoufox-hardening into main

Reviewed-on: #1798
fix(tradein-browser): camoufox hardening — block_images/webrtc + forced MSK tz
2026-06-19 16:50:24 +00:00 · 2026-06-19 19:49:14 +03:00
1 changed files with 9 additions and 0 deletions
--- a/tradein-mvp/browser/server.py
+++ b/tradein-mvp/browser/server.py
@ -222,6 +222,15 @@ async def _launch_browser(provider: str) -> None:
        "locale": "ru-RU",
        "geoip": True,
        "humanize": True,
+        # Скорость: не грузим картинки — нам нужен HTML/JSON, рендер быстрее
+        # (трафик безлимитный, выигрыш именно по времени загрузки).
+        "block_images": True,
+        # Анти-leak: WebRTC может слить реальный IP контейнера мимо прокси → деанон.
+        "block_webrtc": True,
+        # Форсим таймзону +3 МСК. geoip берёт tz одного IP на старте, а БэкКоннект
+        # ротирует IP на каждый запрос (видели Ульяновск UTC+4 при выходе СПб/МСК) →
+        # геолик tz↔IP. Жёсткий Europe/Moscow убирает рассинхрон для РФ-мобильного.
+        "config": {"timezone": "Europe/Moscow"},
    }
    if proxy is not None:
        kwargs["proxy"] = proxy
Author	SHA1	Message	Date
lekss361	7c9a3cf09d	Merge pull request 'fix(tradein-browser): camoufox hardening — block_images/webrtc + форс МСК tz (#1796 )' (#1798 ) from fix/tradein-browser-camoufox-hardening into main All checks were successful Deploy Trade-In / changes (push) Successful in 6s Details Deploy Trade-In / test (push) Has been skipped Details Deploy Trade-In / build-frontend (push) Has been skipped Details Deploy Trade-In / build-backend (push) Has been skipped Details Deploy Trade-In / build-browser (push) Successful in 2m10s Details Deploy Trade-In / deploy (push) Successful in 1m33s Details Reviewed-on: #1798	2026-06-19 16:50:24 +00:00
bot-backend	b5f439a095	fix(tradein-browser): camoufox hardening — block_images/webrtc + forced MSK tz All checks were successful CI / changes (pull_request) Successful in 5s Details CI / backend-tests (pull_request) Has been skipped Details CI / frontend-tests (pull_request) Has been skipped Details CI / openapi-codegen-check (pull_request) Has been skipped Details Со всеми знаниями из ресёрча camoufox (#1796 Avito anti-bot): - block_images=True — быстрее грузит (HTML/JSON, без рендера картинок). - block_webrtc=True — закрывает WebRTC-leak реального IP мимо прокси. - config timezone=Europe/Moscow — форсим +3 МСК: geoip+БэкКоннект (ротация IP на каждый запрос) давал геолик tz↔IP (Ульяновск UTC+4 при выходе МСК/СПб).	2026-06-19 19:49:14 +03:00