// Turnstile Patch - minimal only // Full aggressive patches (chrome.runtime delete / permissions / plugins / languages // / iframe postMessage spam) were observed to break xAI signup with: // [permission_denied] HTTP 403 // Keep webdriver hide only. Auto-click remains best-effort and local-only. (function () { "use strict"; if (window.__grokStealthApplied) return; window.__grokStealthApplied = true; // 1. Hide navigator.webdriver (instance + prototype when possible) try { Object.defineProperty(navigator, "webdriver", { get: function () { return false; }, configurable: true, }); } catch (e) {} try { var desc = Object.getOwnPropertyDescriptor(Navigator.prototype, "webdriver"); if (!desc || desc.configurable) { Object.defineProperty(Navigator.prototype, "webdriver", { get: function () { return false; }, configurable: true, }); } } catch (e) {} // 2. Best-effort Turnstile checkbox click (same-origin only; no postMessage spam) function tryClickTurnstile() { try { var iframes = document.querySelectorAll( 'iframe[src*="challenges.cloudflare.com"], iframe[src*="turnstile"]' ); for (var i = 0; i < iframes.length; i++) { try { var body = iframes[i].contentDocument || iframes[i].contentWindow.document; var checkbox = body.querySelector('input[type="checkbox"], .mark'); if (checkbox && !checkbox.checked) { checkbox.click(); } } catch (e) { // cross-origin: skip } } } catch (e) {} } if (document.readyState === "loading") { document.addEventListener("DOMContentLoaded", function () { var n = 0; var t = setInterval(function () { n++; tryClickTurnstile(); if (n > 80) clearInterval(t); }, 500); }); } else { var n = 0; var t = setInterval(function () { n++; tryClickTurnstile(); if (n > 80) clearInterval(t); }, 500); } })();