docs: clog 144.0.7559.111, Android WebView, proxy-bypass-rgx, custom-headers docs

Author: MSTU0

CHANGELOG.md

@@ -3,6 +3,32 @@
 > **Research scope:** Entries in this changelog describe features evaluated in authorized labs and defensive benchmarking programs. Follow the [Legal Disclaimer](DISCLAIMER.md) and [Responsible Use Guidelines](RESPONSIBLE_USE.md). We work with security vendors to investigate any misuse, so report concerns to [support@botbrowser.io](mailto:support@botbrowser.io).
 
 
+## [2026-02-06]
+### Major
+- **Chromium Core → 144.0.7559.111**: Updated the engine to Chrome 144 stable (144.0.7559.111). This keeps Web Platform behavior, rendering consistency, and security patches aligned with upstream Chrome.
+
+- **Android WebView Simulation**: Complete Android WebView fingerprint support with authentic behavior. Properly handles WebView-specific disabled features, permission differences, and Privacy Sandbox restrictions. Enables accurate WebView identity when using `--user-agent` with WebView user-agent strings.
+
+### New
+- **Regex Proxy Rules (PRO)**: Added `--proxy-bypass-rgx` flag to define URL patterns via regular expressions for proxy routing control. Supports RE2 syntax with `|` for multiple patterns and works in conjunction with `--proxy-bypass-list`.
+
+- **Custom HTTP Headers (PRO)**: Added `--bot-custom-headers` flag to inject custom HTTP request headers into all outgoing requests. Configure via CLI (`--bot-custom-headers='{"X-Custom":"value"}'`), profile JSON (`configs.customHeaders`), or CDP (`BotBrowser.setCustomHeaders`).
+
+### Improvements
+- **Window/Screen Size CLI Formats**: Extended `--bot-config-window` and `--bot-config-screen` to support WxH format (e.g., `1920x1080`) and full JSON configuration, in addition to existing `real` and `profile` options.
+
+### Fixes
+- **Per-Context Fingerprint on Windows (ENT Tier3)**: Fixed per-context fingerprints not applying correctly on Windows.
+
+- **Per-Context HTTP Headers (ENT Tier3)**: HTTP request headers (`User-Agent`, `sec-ch-ua-*`) now correctly reflect per-context fingerprint settings, matching the JavaScript API values.
+
+- **Performance Memory API Consistency**: `performance.memory` values now show natural fluctuations consistent with real browser behavior.
+
+- **Docker Font Consistency**: Font fingerprints now remain consistent regardless of host system font availability in containerized environments.
+
+- **Windows Profile Extension Loading**: Fixed `--bot-script` extensions failing to load when using Windows fingerprint profiles on Linux/macOS hosts.
+
+
 ## [2026-01-31]
 ### Major
 - **Chromium Core → 145.0.7632.26**: Updated the engine to Chrome 145 early release (145.0.7632.26) to stay ahead with the latest Chrome development. This maintains Web Platform parity, rendering consistency, and security patches with upstream.

CLI_FLAGS.md

@@ -108,6 +108,25 @@ This skips per-page IP lookups and speeds up navigation.
 - Per-context proxy (ENT Tier1): set different proxies via `createBrowserContext({ proxy })`; BotBrowser auto-derives geo info in both cases
 - Avoid: framework-specific options like `page.authenticate()` that disable BotBrowser's geo-detection, which may leak location information
 
+### `--proxy-bypass-rgx` (PRO)
+Define URL patterns via regular expressions for proxy routing control.
+
+```bash
+# Regex pattern with | for multiple domains
+--proxy-bypass-rgx="\.google\.com$|\.github\.com$"
+
+# Combined with standard bypass list
+--proxy-server=socks5://127.0.0.1:1080 \
+--proxy-bypass-list="localhost,127.0.0.1" \
+--proxy-bypass-rgx="\.internal\.company\.com$"
+```
+
+**Features:**
+- Uses RE2 regex syntax
+- Use `|` within the pattern for multiple domains (e.g., `domain1\.com$|domain2\.com$`)
+- Works as a union with `--proxy-bypass-list`
+- Matches against both hostname and full URL
+
 ### `--bot-local-dns` (ENT Tier1)
 Enable the local DNS solver. This keeps DNS resolution local instead of relying on a proxy provider's DNS behavior, improving privacy and speed while avoiding common DNS poisoning paths.
 
@@ -214,6 +233,24 @@ Documentation: Chrome `chrome.debugger` API - <https://developer.chrome.com/docs
 
 Examples: [Bot Script](examples/bot-script)
 
+### `--bot-custom-headers` (PRO)
+Inject custom HTTP request headers into all outgoing requests.
+
+```bash
+# JSON format with header name-value pairs
+--bot-custom-headers='{"X-Custom-Header":"value","X-Another":"value2"}'
+```
+
+**Configuration Methods:**
+- CLI flag: `--bot-custom-headers='{"Header":"value"}'`
+- Profile JSON: `configs.customHeaders`
+- CDP: `BotBrowser.setCustomHeaders`
+
+**Notes:**
+- Headers are added to all HTTP/HTTPS requests
+- Useful for API authentication, session management, or request routing
+- JSON format with string key-value pairs
+
 ---
 
 <a id="profile-configuration-override-flags"></a>
@@ -260,8 +297,16 @@ BotBrowser auto-generates matching `navigator.userAgentData` (brands, fullVersio
 > **Note: UA/Engine Congruence:** Keep `--bot-config-ua-full-version` aligned with your Chromium major version, and use `--bot-config-brand-full-version` when a vendor's cadence (Edge, Opera, Brave) diverges so UA-CH metadata stays internally protected.
 
 **Display & Input**
-- `--bot-config-window=profile`: Window dimensions: profile (use profile), real (system window)
-- `--bot-config-screen=profile`: Screen properties: profile (use profile), real (system screen)
+- `--bot-config-window=<value>`: Window dimensions with multiple formats:
+  - `profile` - Use profile's window settings (default)
+  - `real` - Use actual system window dimensions
+  - `WxH` - Direct size specification (e.g., `1920x1080`), sets innerWidth/innerHeight with outerWidth/outerHeight auto-derived from profile borders
+  - `JSON` - Full customization (e.g., `'{"innerWidth":1920,"innerHeight":1080,"devicePixelRatio":2}'`)
+- `--bot-config-screen=<value>`: Screen properties with multiple formats:
+  - `profile` - Use profile's screen settings (default)
+  - `real` - Use actual system screen dimensions
+  - `WxH` - Direct size specification (e.g., `2560x1440`), sets width/height with availWidth/availHeight auto-derived from profile
+  - `JSON` - Full customization (e.g., `'{"width":2560,"height":1440,"availWidth":2560,"availHeight":1400}'`)
 - `--bot-config-keyboard=profile`: Keyboard settings: profile (emulated), real (system keyboard)
 - `--bot-config-fonts=profile`: Font settings: profile (embedded), expand (profile + fallback), real (system fonts)
 - `--bot-config-color-scheme=light`: Color scheme: light, dark
@@ -378,6 +423,13 @@ chromium-browser \
   --bot-config-browser-brand="edge" \  # ENT Tier2 feature
   --bot-config-window="real" \
   --user-data-dir="/tmp/instance2" &
+
+# Instance 3 - Custom window/screen size for OCR or specific viewport testing
+chromium-browser \
+  --bot-profile="/absolute/path/to/profile.enc" \
+  --bot-config-window="1920x1080" \
+  --bot-config-screen="2560x1440" \
+  --user-data-dir="/tmp/instance3" &
 ```
 
 ### Performance timing & noise control (ENT Tier2)

PER_CONTEXT_FINGERPRINT.md

@@ -282,6 +282,7 @@ Most `--bot-*` flags from [CLI_FLAGS.md](CLI_FLAGS.md) work with per-context con
 | Window | `--bot-always-active` to maintain active window state |
 | Session | `--bot-inject-random-history` for session authenticity |
 | Proxy | `--proxy-server` (configure proxy per-context via `botbrowserFlags`), `--proxy-ip` to skip IP lookups |
+| HTTP | `--bot-custom-headers` for custom HTTP request headers per context |
 | Config | `--bot-config-platform`, `--bot-config-timezone`, `--bot-config-noise-canvas`, etc. |
 
 See [CLI_FLAGS.md](CLI_FLAGS.md) for the complete flag reference.

profiles/PROFILE_CONFIGS.md

@@ -30,9 +30,9 @@ BotBrowser uses a three-tier priority system for configuration:
 
 ### Priority Order (Highest to Lowest)
 
-1. **🥇 CLI `--bot-config-*` flags** - Highest priority, overrides everything
-2. **🥈 Profile `configs` settings** - Medium priority, overrides profile defaults
-3. **🥉 Profile default values** - Lowest priority, built-in profile data
+1. **CLI `--bot-config-*` flags** - Highest priority, overrides everything
+2. **Profile `configs` settings** - Medium priority, overrides profile defaults
+3. **Profile default values** - Lowest priority, built-in profile data
 
 ### Why CLI Flags Are Recommended
 
@@ -138,6 +138,12 @@ These fields work together with `--user-agent` CLI flag. BotBrowser auto-generat
 
 > **UDP-over-SOCKS5:** ENT Tier3 support detects when a SOCKS5 upstream offers UDP associate and natively tunnels QUIC/STUN through it. No additional flag is required; simply provide a SOCKS5 proxy that advertises UDP support.
 
+### HTTP Request Settings
+
+| Field            | Description                               | Default |
+| ---------------- | ----------------------------------------- | ------- |
+| `customHeaders` (PRO) | Inject custom HTTP request headers into all outgoing requests. Object with header name-value pairs (e.g., `{"X-Custom":"value"}`). | `{}`    |
+
 ### Window & Screen Settings
 
 | Field    | Description                                                                                              | Default     |
@@ -277,6 +283,11 @@ These fields work together with `--user-agent` CLI flag. BotBrowser auto-generat
 
     // mobileForceTouch: Force touch events on/off when simulating mobile devices
     "mobileForceTouch": false,
+
+    // customHeaders (PRO): inject custom HTTP headers into all outgoing requests
+    "customHeaders": {
+      "X-Custom-Header": "value"
+    }
   }
 }