is-antibot 1.6.0 → 1.6.2

package/package.json

@@ -2,7 +2,7 @@
   "name": "is-antibot",
   "description": "Identify if a response is an antibot challenge from CloudFlare, Akamai, DataDome, Vercel, PerimeterX, Shape Security, and more, including CAPTCHA providers like reCAPTCHA and hCaptcha.",
   "homepage": "https://github.com/microlinkhq/is-antibot",
-  "version": "1.6.0",
+  "version": "1.6.2",
   "exports": {
     ".": "./src/index.js"
   },

package/src/index.js

@@ -20,7 +20,7 @@ const createGetHeader = headers =>
 const createTestPattern = value => {
   if (!value) return () => false
   const lowerValue = value.toLowerCase()
-  return (pattern, isRegex = false) => {
+  return pattern => {
     if (pattern instanceof RegExp) {
       try {
         return pattern.test(value)
@@ -28,14 +28,6 @@ const createTestPattern = value => {
         return false
       }
     }
-
-    if (isRegex) {
-      try {
-        return new RegExp(pattern, 'i').test(value)
-      } catch {
-        return false
-      }
-    }
     return lowerValue.includes(pattern.toLowerCase())
   }
 }
@@ -393,12 +385,13 @@ const detect = ({ headers = {}, html = '', url = '', statusCode } = {}) => {
   }
 
   // Reddit: blocked requests are served as HTML challenge pages.
-  // Strongest signal is the blocked-page copy in HTML.
-  if (
-    parseUrl(url).domain === 'reddit.com' &&
-    hasAnyHtml([/blocked by network security\./i])
-  ) {
-    return byHtml('reddit')
+  if (parseUrl(url).domain === 'reddit.com') {
+    if (statusCode === 403) {
+      return byStatusCode('reddit')
+    }
+    if (hasAnyHtml([/blocked by network security\./i])) {
+      return byHtml('reddit')
+    }
   }
 
   // LinkedIn: status 999 is LinkedIn's dedicated bot-detection response
@@ -406,6 +399,14 @@ const detect = ({ headers = {}, html = '', url = '', statusCode } = {}) => {
     return byStatusCode('linkedin')
   }
 
+  // Instagram: login page redirect indicates bot detection
+  if (
+    parseUrl(url).domain === 'instagram.com' &&
+    hasAnyHtml([/<title>\s*Login\s*[•·]\s*Instagram\s*<\/title>/i])
+  ) {
+    return byHtml('instagram')
+  }
+
   // YouTube: empty title pattern indicates a degraded response requiring BotGuard JS attestation
   // Normal pages have `<title>Video Title - YouTube</title>`, bots get `<title> - YouTube</title>`
   if (hasAnyHtml([/<title>\s*-\s*YouTube<\/title>/i])) {