False positives are possible?

[ela738362]

Hello,

I’m currently integrating your library into a Next.js 15 project using the following setup:

disableDevtool({
  url: `/${lang}/warning`,
  ondevtoolopen: async (type: unknown, next: () => void) => {
    await logEvent({
      name: 'DEVTOOL OPEN',
      metadata: {
        // ...
      },
    });
    next();
  },
});

This setup logs an event and redirects the user to a warning page whenever the developer tools are opened. However, I’ve received feedback from a user who was alarmed by the redirect, insisting they weren’t doing anything malicious.

Could there be false positives with this detection? Is it possible for the devtool trigger to activate under benign circumstances? I’d appreciate any insights you can provide.

Thank you!

[theajack]

@ela738362
What version of QQ Browser is it? I am using 19.4.5 and it works fine here.