0

I wonder if there is a way to determine whether the JavaScript code included on a specific website is using a specific Browser API, ideally through static analysis of the code.

Specifically, I want to detect usage of the nagivator.credentials API.

I guess since code can be minified and obfuscated, this probably is fairly difficult without executing the code and waiting if an API call occurs. Nonetheless, maybe someone on here has a good idea on how to determine API usage?

Martin
  • 534
  • 4
  • 14
  • That's going to be quite hard, especially even if the code is obfuscated just a little. You could use regex but that's unreliable... – kelsny Nov 08 '22 at 19:43

0 Answers0