fingerprintjs

• fix: A minus sign missing in the "timezone" entropy source fallback (#986)
• fix: The geometry and text images in the "canvas" entropy source are swapped (#990). They were swapped mistakenly in v4.1.0.

• fix: WebGL console warning in Chrome 121 and Safari 17.4 (#983)

• fix: An empty OS notification is shown in some cases (#969)

• Add a new "reduced transparency" entropy source (#956)

• A new algorithm for audio fingerprint, which withstands Safari's anti-fingerprinting (#957)

• Increase the accuracy of Chromium Android detection (#965)

• Stop supporting old browsers:

  • iOS 11
  • Firefox 74 and older
  • Chrome 64 and older

  They cover 0.05% of all usages according to the Fingerprint Pro statistics. FingerprintJS won't stop working in these browsers immediately, we just won't check in them. See the list of currently supported browsers in the browser support guide.

• Prepare for Safari 17 (#951)

  Safari 17 introduces anti-fingerprinting measures in private mode: some fingerprint components change. That made FingerprintJS produce different fingerprints. Unfortunately, we had to disable the entropy sources in Safari 17 for now to keep the fingerprints stable, because there is no apparent way to restore the original components. We keep looking for ways to get stable entropy from these sources.

• Improve the performance by optimizing the MurmurHash3 implementation (#931)

• Add new entropy sources:
  • WebGL basics
  • WebGL extensions
  • Apple Pay
  • Private Click Measurement

Breaking

• ⚠️ The license switch from MIT to BSL 1.1. All the reasons and implications of the license change are explained in our blog post
• Unexpected entropy source errors are saved as is instead of coercing to a { message: any } object

See the migration guide to learn how to upgrade from v3 to v4.

• Update the DOM blocker filters (#920)
• Optimize by simplifying the entropy source handling under the hood (#902)

• fix: An unhandled rejection in the audio entropy source (#893)

• Add a video card entropy source (#730)

• Add a pdfViewerEnabled entropy source (#795)

  This is a modern replacement for the plugins entropy source. Exclude the plugins fingerprint component if you need more stability.

• Add an architecture entropy source that can tell x86/64 from other CPU architectures (#864)

• Stop supporting old browsers:

  • Internet Explorer 11
  • iOS 10
  • Firefox 66 and older
  • Chrome 56 and older
  • Samsung Internet 4
  • Android Browser 4.4

  They cover 0.05% of all usages according to the Fingerprint Pro statistics. FingerprintJS won't stop working in these browsers immediately, we just won't check in them. See the list of currently supported browsers in the browser support guide.

• Stabilize the canvas entropy source in Samsung Internet (#812)
• fix: The list of DOM blockers isn't removed during treeshaking (#805)

• Obfuscate the inappropriate selectors in the distributive code of the library (#803)

  Note: this change is for automated analyzers and beginner security researches. FingerprintJS doesn't put any ads, links or other content on your website. You can learn how we use advertisement selectors in a blog post.

• Update the DOM blocker filters (#787)
• fix: Unhandled promise rejection may occur in some cases

• fix: The library triggers a console error message unless the page Content Security Policy allows unsafe-inline for style-src (#737)
• Reduce the number of monitoring requests sent by the library copies installed from NPM (#746)

• Reduce the number of monitoring requests sent by the library copies installed from NPM (#722)

Important:

• Add an AJAX request that collects installation statistics. The request is performed only by version installed from NPM. See the documentation is you want to turn it off. (#709)

Miscellaneous:

• Move some top level declarations to improve tree-shaking (#700)
• Actualize the environment detection functions (#701)
• Actualize the list of supported browsers (#713)
• fix: An indefinite setTimeout loop in Firefox (#717)
• Actualize the list of DOM blockers (#719)

• Add a new result field: confidence score (#689). The confidence score field tells how much the agent is sure about the visitor identifier. See the API reference for more details.
• Actualize the list of DOM blockers
• Fix an error that occurs in Firefox Add-ons (#684)
• Handle missing iframe.contentWindow.document, for example in JSDOM (#686)

The visitor identifiers are compatible with version 3.2.0.

• Make the entropy sources start running in load function (#678). It will make get run much faster when some time passes between calling load() and get(). See an example in the quick start guide.

The visitor identifiers are compatible with version 3.1.0.

• fix: get() function never completes in WeChat built-in browser on iOS 13 (#645)
• Handle not numeric screen resolutions (#670)

• Actualize the list of DOM blockers