Funkcionalnosć tutoho sydła so přez wothladowanske dźěła wobmjezuje, kotrež maja waše dožiwjenje polěpšić. Jeli nastawk waš problem njerozrisuje a chceće prašenje stajić, wobroćće so na naše zhromodźenstwo pomocy, kotrež na to čaka, wam na @FirefoxSupport na Twitter a /r/firefox na Reddit pomhać.

Avatar for Username

Pomoc přepytać

Hladajće so wobšudstwa pomocy. Njenamołwimy was ženje, telefonowe čisło zawołać, SMS pósłać abo wosobinske informacije přeradźić. Prošu zdźělće podhladnu aktiwitu z pomocu nastajenja „Znjewužiwanje zdźělić“.

Dalše informacije

Tuta nitka je so archiwowała. Prošu stajće nowe prašenje, jeli pomoc trjebaće.

can i deny the firebug extention to protect my .js files on my website? how can i do that?

  • 2 wotmołwje
  • 3 maja tutón problem
  • 3 napohlady
  • Poslednja wotmołwa wot a1ex_sinner

a1ex_sinner
a1ex_sinner
more options

In the tab "html" witch in Firebug panel everyone who want's can see the content of my javascript.

I did like this, but the Firebug still tricking script.

function do (style) { if(navigator.userAgent.indexOf('MSIE')==-1) { var scr=document.createElement('script'); scr.type='text/javascript'; scr.src='js/style/'+style+'.js'; } else { var scr=document.createElement("<script type=\"text/javascript\" src=\"js/style/"+style+'.js'+"\"></"+"script>"); } document.documentElement.getElementsByTagName('HEAD')[0].appendChild(scr); }

do("fill"); do("fcats");

In the tab "html" witch in Firebug panel everyone who want's can see the content of my javascript. I did like this, but the Firebug still tricking script. function do (style) { if(navigator.userAgent.indexOf('MSIE')==-1) { var scr=document.createElement('script'); scr.type='text/javascript'; scr.src='js/style/'+style+'.js'; } else { var scr=document.createElement("<script type=\"text/javascript\" src=\"js/style/"+style+'.js'+"\"></"+"script>"); } document.documentElement.getElementsByTagName('HEAD')[0].appendChild(scr); } do("fill"); do("fcats");

Wšě wotmołwy (2)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

It's hopeless. Because the JavaScript code must be sent to the browser in order to run, you can't prevent sophisticated users from seeing it.

Firebug isn't even necessary: the page source can be viewed by pressing Ctrl+u and if the JavaScript is in a separate file, clicking the link to the file in the <script> tag will display it. When you add the script dynamically, it still can be viewed using the Web Developer extension or the DOM Inspector extension. The file probably is in the cache as well.

Many people "minify" their script code, which makes it extremely difficult to read. However, some people still can make sense of it. (I'm not one of them.)

What's so important to hide, anyway?

a1ex_sinner
a1ex_sinner Prašer
more options

Yes, it's very important to hide it.

I did some settins in .htaccess so if someone trying to access script by using the path nothing is displaying. Also this method doesn't show the content inside <script...>" and "</script>" when you viewing the page source (except Firebug).

Cache is denied by http-headers.

I already thought about the last one you wrote about. I'l try to minify the code later, but now I want to protect it in other availible ways. Really, very bulky stuf and it needs more protection.

About the extention (how to block). Founded this article but there is no such property (at least in last version of Firebug) window.console.firebug = undefined.

Wot a1ex_sinner změnjeny