Skip to content

[Bug 🪲]: Steam Browser anti bot protection loop #782

Description

@ilagko

Before Reporting

  • I found no existing issues matching my bug
  • My issue is not caused by a theme
  • My issue is not caused by a plugin

Operating System

Windows

(if-applicable) Linux Distribution Check

  • I am not a NixOS user. SteamClientHomebrew does not maintain the NixOS package, all contributions are made by external contributors like you! If you'd like to discuss or report issues with other NixOS users, check out the NixOS MegaThread.

(if-applicable) Linux Distribution

None

(if-applicable) Linux Install Method

None

Describe the Bug

Whenever you have millennium installed and try to go to a cloudflare protected website, or any type of captcha (even paypal captcha when adding funds to steam wallet) it always says that you are a robot or has a continuous loop to say that you are not a robot. Easiest to try in shift tab menu browser.

Steps To Reproduce

Prerequisites

  • Steam Client installed
  • Millennium installed and active
  • Any website protected by Cloudflare or other CAPTCHA service

Reproduction Steps

  1. Launch Steam with Millennium enabled.
  2. Open the Steam Overlay browser (Shift+Tab) or any Steam embedded browser view.
  3. Navigate to a Cloudflare-protected website (e.g. csstats.gg).
  4. Complete the "Verify you are human" challenge.
  5. After successful verification, refresh the page or navigate to another Cloudflare-protected website.

Expected Result

  • The verification challenge should complete successfully.
  • The user should be able to access the website normally.
  • Verification state should persist across requests as intended.

Actual Result

  • The challenge enters a continuous verification loop.
  • Cloudflare repeatedly asks the user to verify they are human.
  • Access to the website is never granted despite successful completion of the challenge.
  • Similar behavior occurs with other CAPTCHA-protected services, including PayPal CAPTCHA prompts when adding funds to a Steam Wallet.

Additional Information

  • Removing Millennium resolves the issue.
  • Deleting Steam's cookie database (%LOCALAPPDATA%\Steam\htmlcache\Default\Network\Cookies) temporarily resolves the issue until a new Cloudflare verification cookie is created.
  • Issue reproduces consistently across multiple Cloudflare-protected websites.

Anything else?

No response

Metadata

Metadata

Assignees

No one assigned

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions