Page CSP not enforced (setBypassCSP — an automation context, never a real browser)
br.csp_bypassed · convicts
browserlayer
automationcategory
1evaders caught
What it catches
rebrowser-bot-detector bypassCsp; Playwright/Puppeteer setBypassCSP(true), unfixable by patches
Signals it reads
browser.csp_bypassed
How it fires
present
Evaders it caught 1
Bypassed by 10
Frontier evaders that reach the detector uncaught (scored only suspicious, defeating every convicting tell) — this check is not one that stops them. The red-team frontier this detection still has to convict.