0

I am doing some R&D to define all the technologies involved for the developement of a multi tier application that has html5 as browser frontend.

Now I plan to write all the client in html5 css js, having a middle tier my "real" code is anyway safely at server side, anyway for different reasons there could be a reason to hide the javascript in my web pages.

Minifying it is a way to make it less readable, but is there a simple way to "hide sources"?

The js files will typically be on webfarm,but in same cases there will be an enterprise installation, and this is why i am invesetigating a way to "hide the code".

Thanks.

UnDiUdin
  • 14,924
  • 39
  • 151
  • 249
  • 2
    possible dublicate [how-can-i-obfuscate-javascript](http://stackoverflow.com/questions/194397/how-can-i-obfuscate-javascript) – vault Feb 11 '13 at 11:51

3 Answers3

5

No, you cannot hide JS source code. If some one wants to take a peek at your JS source they will be able to.

Minification + Obfuscation are things you can do however. Note that these techniques don't protect your source, they only make it difficult to read through your source.

techfoobar
  • 65,616
  • 14
  • 114
  • 135
3

Minifying JavaScript does not in any way hide it, any developer would be able to reformat it in seconds.

By definition, there is no way to hide your JavaScript. Any code that is available for the browser to execute is available for the user to read.

TS00
  • 219
  • 2
  • 8
3

You cannot hide your JS. It will always be visible as long as it is downloaded from your server.

You can use some techniques to make it harder to someone to read your code. These include:

  1. minify and obfuscate (like you pointed out). Using agreesive mode in googleClosure makes the code pretty hard to read.
  2. interpolate client side code with server side.
  3. Getting part of your client side code with AJAX

This only makes "reverse engeneering" harder, not impossible, specially if someone is patient enough to follow the breadcrumbs.

UPDATE: There is an alternative way to "hide" your code. In browsers that support extensions, you can develop an extension with most of your app core funcionalities and use JS to interact with the code. Most browsers support extensions with external dlls. However, this will "force" your users to download your extension to use your webapp which might not be a good idea.

Tivie
  • 18,864
  • 5
  • 58
  • 77