luna/twitter-cli-cookiefile
1
0
Fork 0
Code Issues Pull Requests Actions Releases Activity

fix: use curl_cffi for ClientTransaction init to prevent TLS fingerprint leak

Browse Source
This commit is contained in:
jackwener
2026-03-09 19:14:33 +08:00
parent b83abadb73
commit 731151e62e
3 changed files with 13 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
twitter_cli/client.py
View File

@@ -589,12 +589,19 @@ class TwitterClient:
return
self._ct_init_attempted = True
try:
session = _requests_lib.Session()
session.headers.update(_gen_ct_headers())
home_page = session.get("https://x.com", timeout=10)
# Use curl_cffi for ClientTransaction init to maintain consistent
# Chrome TLS fingerprint. Using Python requests here would leak
# a different TLS fingerprint on the same IP — a detection vector.
cffi_session = _get_cffi_session()
ct_headers = _gen_ct_headers()
home_page = cffi_session.get(
"https://x.com", headers=ct_headers, timeout=10,
)
home_page_response = bs4.BeautifulSoup(home_page.content, "html.parser")
ondemand_url = get_ondemand_file_url(response=home_page_response)
ondemand_file = session.get(ondemand_url, timeout=10)
ondemand_file = cffi_session.get(
ondemand_url, headers=ct_headers, timeout=10,
)
self._client_transaction = ClientTransaction(
home_page_response=home_page_response,
ondemand_file_response=ondemand_file.text,