javascript-obfuscator 3.1.0 → 3.2.3

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 Change Log
 
+v3.2.3
+---
+* Fixed missing transformation of string array calls in some cases
+* Fixed generation of reserved identifier names like `Map` or `Set` for `mangled` and `mangled-shuffled` identifier names generators
+
+v3.2.2
+---
+* Fixed https://github.com/javascript-obfuscator/javascript-obfuscator/issues/1039
+
+v3.2.1
+---
+* Updated copyright
+
+v3.2.0
+---
+* **New options**: `stringArrayCallsTransform` and `stringArrayCallsTransformThreshold`
+* Fixed https://github.com/javascript-obfuscator/javascript-obfuscator/pull/1046
+
 v3.1.0
 ---
 * Added support of `es2022` features: class static block

package/README.md

@@ -379,10 +379,12 @@ Following options are available for the JS Obfuscator:
     splitStrings: false,
     splitStringsChunkLength: 10,
     stringArray: true,
+    stringArrayCallsTransform: true,
+    stringArrayCallsTransformThreshold: 0.5,
+    stringArrayEncoding: [],
     stringArrayIndexesType: [
         'hexadecimal-number'
     ],
-    stringArrayEncoding: [],
     stringArrayIndexShift: true,
     stringArrayRotate: true,
     stringArrayShuffle: true,
@@ -441,8 +443,10 @@ Following options are available for the JS Obfuscator:
     --split-strings <boolean>
     --split-strings-chunk-length <number>
     --string-array <boolean>
-    --string-array-indexes-type '<list>' (comma separated) [hexadecimal-number, hexadecimal-numeric-string]
+    --string-array-calls-transform <boolean>
+    --string-array-calls-transform-threshold <number>
     --string-array-encoding '<list>' (comma separated) [none, base64, rc4]
+    --string-array-indexes-type '<list>' (comma separated) [hexadecimal-number, hexadecimal-numeric-string]
     --string-array-index-shift <boolean>
     --string-array-rotate <boolean>
     --string-array-shuffle <boolean>
@@ -1097,6 +1101,80 @@ Type: `boolean` Default: `true`
 
 Removes string literals and place them in a special array. For instance, the string `"Hello World"` in `var m = "Hello World";` will be replaced with something like `var m = _0x12c456[0x1];`
 
+### `stringArrayCallsTransform`
+Type: `boolean` Default: `false`
+
+##### :warning: [`stringArray`](#stringarray) option must be enabled
+
+Enables the transformation of calls to the [`stringArray`](#stringarray). All arguments of these calls may be extracted to a different object depending on [`stringArrayCallsTransformThreshold`](#stringarraycallstransformthreshold) value.
+So it makes it even harder to automatically find calls to the string array.
+
+Example:
+```
+function foo() {
+    var k = {
+        c: 0x2f2,
+        d: '0x396',
+        e: '0x397',
+        f: '0x39a',
+        g: '0x39d',
+        h: 0x398,
+        l: 0x394,
+        m: '0x39b',
+        n: '0x39f',
+        o: 0x395,
+        p: 0x395,
+        q: 0x399,
+        r: '0x399'
+    };
+    var c = i(k.d, k.e);
+    var d = i(k.f, k.g);
+    var e = i(k.h, k.l);
+    var f = i(k.m, k.n);
+    function i(c, d) {
+        return b(c - k.c, d);
+    }
+    var g = i(k.o, k.p);
+    var h = i(k.q, k.r);
+}
+function j(c, d) {
+    var l = { c: 0x14b };
+    return b(c - -l.c, d);
+}
+console[j(-'0xa6', -'0xa6')](foo());
+function b(c, d) {
+    var e = a();
+    b = function (f, g) {
+        f = f - 0xa3;
+        var h = e[f];
+        return h;
+    };
+    return b(c, d);
+}
+function a() {
+    var m = [
+        'string5',
+        'string1',
+        'log',
+        'string3',
+        'string6',
+        'string2',
+        'string4'
+    ];
+    a = function () {
+        return m;
+    };
+    return a();
+}
+```
+
+### `stringArrayCallsTransformThreshold`
+Type: `number` Default: `0.5`
+
+##### :warning: [`stringArray`](#stringarray) and [`stringArrayCallsTransformThreshold`](#stringarraycallstransformthreshold) options must be enabled
+
+You can use this setting to adjust the probability (from 0 to 1) that calls to the string array will be transformed.
+
 ### `stringArrayEncoding`
 Type: `string[]` Default: `[]`
 
@@ -1419,7 +1497,7 @@ Unicode escape sequence increases code size greatly and strings easily can be re
 ## Preset Options
 ### High obfuscation, low performance
 
-Performance will 50-100% slower than without obfuscation
+The performance will be much slower than without obfuscation
 
 ```javascript
 {
@@ -1440,6 +1518,7 @@ Performance will 50-100% slower than without obfuscation
     splitStrings: true,
     splitStringsChunkLength: 5,
     stringArray: true,
+    stringArrayCallsTransform: true,
     stringArrayEncoding: ['rc4'],
     stringArrayIndexShift: true,
     stringArrayRotate: true,
@@ -1456,7 +1535,7 @@ Performance will 50-100% slower than without obfuscation
 
 ### Medium obfuscation, optimal performance
 
-Performance will 30-35% slower than without obfuscation
+The performance will be slower than without obfuscation
 
 ```javascript
 {
@@ -1477,6 +1556,8 @@ Performance will 30-35% slower than without obfuscation
     splitStrings: true,
     splitStringsChunkLength: 10,
     stringArray: true,
+    stringArrayCallsTransform: true,
+    stringArrayCallsTransformThreshold: 0.75,
     stringArrayEncoding: ['base64'],
     stringArrayIndexShift: true,
     stringArrayRotate: true,
@@ -1493,7 +1574,7 @@ Performance will 30-35% slower than without obfuscation
 
 ### Low obfuscation, High performance
 
-Performance will slightly slower than without obfuscation
+The performance will be at a relatively normal level
 
 ```javascript
 {
@@ -1511,6 +1592,7 @@ Performance will slightly slower than without obfuscation
     simplify: true,
     splitStrings: false,
     stringArray: true,
+    stringArrayCallsTransform: false,
     stringArrayEncoding: [],
     stringArrayIndexShift: true,
     stringArrayRotate: true,
@@ -1542,6 +1624,8 @@ Performance will slightly slower than without obfuscation
     simplify: true,
     splitStrings: false,
     stringArray: true,
+    stringArrayCallsTransform: false,
+    stringArrayCallsTransformThreshold: 0.5,
     stringArrayEncoding: [],
     stringArrayIndexShift: true,
     stringArrayRotate: true,
@@ -1646,7 +1730,7 @@ Become a sponsor and get your logo on our README on Github with a link to your s
 ## License
 [![FOSSA Status](https://app.fossa.io/api/projects/git%2Bgithub.com%2Fjavascript-obfuscator%2Fjavascript-obfuscator.svg?type=large)](https://app.fossa.io/projects/git%2Bgithub.com%2Fjavascript-obfuscator%2Fjavascript-obfuscator?ref=badge_large)
 
-Copyright (C) 2016-2021 [Timofey Kachalov](http://github.com/sanex3339).
+Copyright (C) 2016-2022 [Timofey Kachalov](http://github.com/sanex3339).
 
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met: