js-confuser 1.7.2 → 2.0.0-alpha.0

package/.github/ISSUE_TEMPLATE/bug_report.md

@@ -9,7 +9,7 @@ assignees: ''
 
 **Describe the bug:**
 
-The program gets stuck in a infinite loop
+The program enters an infinite loop and does not produce the expected output.
 
 **Config and Small code sample**
 
@@ -30,12 +30,14 @@ console.log("My Small Code Sample");
 
 **Expected behavior**
 
-The program should output "My Small Code Sample"
+Example: The program should output "My Small Code Sample"
 
 **Actual behavior**
 
-The program stalls forever and never outputs anything
+Example: The program stalls indefinitely and never outputs the expected message.
 
 **Additional context**
 
-Seems the program gets stuck in a infinite loop due to Control Flow Flattening. Disabling the feature seems to rid of the bug.
+Example: It appears that the issue is caused by Control Flow Flattening. Disabling this feature resolves the problem.
+
+

package/.github/workflows/node.js.yml

@@ -15,7 +15,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [14.15, 16.10, 18.0]
+        node-version: [14.15, 16.10, 18.0, 20.16]
         # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
 
     steps:

package/CHANGELOG.md

@@ -1,3 +1,108 @@
+# `2.0.0-alpha.0`
+2.0 Rewrite Alpha 🎉
+
+**⚠️ Warning: This an alpha release. This version is not stable and the likelihood of encountering bugs is significantly higher.**
+
+### Complete rewrite of JS-Confuser using Babel!
+
+**⚠️ Breaking changes**
+
+- Revamped API Interface
+
+- - JSConfuser.obfuscate() resolves to an object
+
+| Property | Type | Description |
+| --- | --- | --- |
+| `code` | `string` | The obfuscated code. |
+
+- Renamed `Stack` to `Variable Masking`
+
+### 2.0 Changes
+
+- Added Custom String Encoding and Custom Lock Code options
+
+- Added `Rename Labels` Learn more here
+
+- Added `Pack` Learn more here
+
+- RGF no longers uses `new Function` instead uses `eval`
+
+- Improved code transforms!
+
+- Improved `Control Flow Flattening`
+
+- - Obfuscates the [Call Graph](https://en.wikipedia.org/wiki/Call_graph)
+
+- - Now supports lexical bindings (`let`, `const`, `class`)
+
+- - `with () { }` statement obfuscation
+
+- Improved `Minify`
+
+- - Removes unused variables and functions
+
+- Improved `Moved Declaration` ability to move variables as unused function parameters
+
+- Improved `String` transforms
+
+- - [Template literals](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Template_literals) are now obfuscated (First converted into equivalent String Literal)
+
+- - [Regular expressions](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide/Regular_expressions) are now obfuscated (First converted into equivalent RegExp() constructor calls)
+
+- - `String Compression` now uses zlib decompression ([Pako](https://github.com/nodeca/pako))
+
+### JS-Confuser.com Revamp
+
+A new UI for JS-Confuser.com, featuring an advanced playground and documentation pages.
+
+The previous version will remain available: [old--confuser.netlify.com](https://old--confuser.netlify.app/)
+
+**Removed features**
+
+- Removed `ES5` option - Use Babel Instead
+
+- Removed `Browser Lock` and `OS Lock` - Use Custom Locks instead
+
+- Removed `Shuffle`'s Hash option
+
+- Removed `Indent` option. [`@babel/generator`](https://www.npmjs.com/package/@babel/generator) does not allow customizing the indentation size. Use Prettier if you still wish for 4 space or tabs. Be mindful if you have `Integrity` or `Self Defending` enabled, as you should not alter the obfuscated code.
+
+
+# `1.7.3`
+Tamper Protection
+
+### `Tamper Protection`
+
+Tamper Protection safeguards the runtime behavior from being altered by JavaScript pitfalls. 
+
+[Learn more here.](/docs/TamperProtection.md)
+
+---
+
+- Rename Variables improvements:
+
+- A new exposed function, `__JS_CONFUSER_VAR__`, can be used to access renamed variables. [Learn more here](/docs/RenameVariables.md).
+
+
+```js
+// Input
+var name = "John Doe";
+eval("console.log(" + __JS_CONFUSER_VAR__(name) + ")");
+
+// Output
+var CA1HU0 = 'John Doe';
+eval('console.log(' + 'CA1HU0' + ')');
+```
+
+- Improved the `Zero Width` identifier generator (Thanks @doctor8296!)
+
+- Pad the `String Concealing` array with more fake strings
+
+- Improve `String Compression`
+
+- New Web UI sneak peak: https://new--confuser.netlify.app/
+
+
 # `1.7.2`
 Updates
 

package/Migration.md

@@ -0,0 +1,57 @@
+## Migration guide to JS-Confuser 2.0
+
+JS-Confuser 2.0 is complete rewrite of the original JS-Confuser created in 2020!
+
+## API Interface changed
+
+### JSConfuser.obfuscate() returns an object now
+
+The method `JSConfuser.obfuscate()` resolves to a object now instead of a string. This result object contains the obfuscated code on the `code` property.
+
+```diff
++JSConfuser.obfuscate(sourceCode, options).then(result=>{
++  console.log(result.code);
++});
+-JSConfuser.obfuscate(sourceCode, options).then(obfuscatedCode=>{
+-  console.log(obfuscatedCode);
+-});
+```
+
+### Removed Anti Debug Lock / Browser Lock / OS Lock
+
+These features have been removed but you can still add these locks using the `lock.customLocks` option.
+
+```js
+{
+  target: "node",
+  
+  // ... Your obfuscator settings ...
+
+  lock: {
+    customLocks: [
+      {
+        code: `
+        // This code will be sprinkled throughout your source code
+        // (Will also be obfuscated)
+
+        if( window.navigator.userAgent.includes('Chrome') ){
+          {countermeasures}
+        }
+
+        // The {countermeasures} template variable is required.
+        // Must be placed in a Block or Switch Case body
+        `,
+        percentagePerBlock: 0.1, // = 10%
+        maxCount: 100, // Default = 100 - You probably don't want an excessive amount placed
+        minCount: 1 // Default = 1 - Ensures this custom lock is placed
+      }
+    ]
+  }
+}
+```
+
+### Stack renamed to Variable Masking
+
+The option `stack` has been renamed to `variableMasking`
+
+[Similar to JScrambler's Variable Masking](https://docs.jscrambler.com/code-integrity/documentation/transformations/variable-masking)