From 9c69a279fd1df4fef9629f7526751d4e21d6b811 Mon Sep 17 00:00:00 2001
From: Hillel Coren <hillelcoren@gmail.com>
Date: Fri, 23 Mar 2018 11:29:50 +0300
Subject: [PATCH] Add check for headless browsers

---
 app/Http/Middleware/StartupCheck.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/app/Http/Middleware/StartupCheck.php b/app/Http/Middleware/StartupCheck.php
index f4cd6e23d864..b73ed205787b 100644
--- a/app/Http/Middleware/StartupCheck.php
+++ b/app/Http/Middleware/StartupCheck.php
@@ -55,6 +55,12 @@ class StartupCheck
             return $next($request);
         }
 
+        // Check to prevent headless browsers from triggering activity
+        if (Utils::isNinja() && ! $request->phantomjs && strpos($request->header('User-Agent'), 'Headless') !== false) {
+            Utils::logError('[Headless Browser] ' . json_encode($request->headers->all()), 'PHP', true);
+            exit('Headless browsers are not supported');
+        }
+
         // Check if a new version was installed
         if (! Utils::isNinja()) {
             $file = storage_path() . '/version.txt';