jscrambler 8.7.1-next.3 → 8.8.0

package/CHANGELOG.md

@@ -1,22 +1,16 @@
 # jscrambler
 
-## 8.7.1-next.3
+## 8.8.0
 
-### Patch Changes
-
-- []: Only parse js files
-
-## 8.7.1-next.2
-
-### Patch Changes
+### Minor Changes
 
-- []: Add filename on webpack-ignore-vendors
+- [477066b]: Added globalNamesPrefix config option to cli
 
-## 8.7.1-next.1
+## 8.7.1
 
 ### Patch Changes
 
-- [ecba0c7]: new beforeProtection type: webpack-ignore-vendors
+- [3ef818f]: Update readme.md
 
 ## 8.7.0
 

package/LICENSE

@@ -0,0 +1,22 @@
+Copyright (c) 2014 Jscrambler
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -1,5 +1,11 @@
 # [![Jscrambler](https://media.jscrambler.com/images/logo_500px.png)](https://jscrambler.com/?utm_source=github.com&utm_medium=referral)
-Jscrambler Client for Browser and Node.js
+Jscrambler Code Integrity Client
+--------------------
+
+Jscrambler [Code Integrity](https://jscrambler.com/code-integrity) is a JavaScript protection technology for Web and Mobile Applications. Its main purpose is to enable JavaScript applications to become self-defensive and resilient to tampering and reverse engineering.
+
+If you're looking to gain control over third-party tags and achieve PCI DSS compliance please refer to Jscrambler [Webpage Integrity](https://jscrambler.com/webpage-integrity).
+
 
 - [Jscrambler](https://jscrambler.com/?utm_source=github.com&utm_medium=referral)
   - [Version Compatibility](#version-compatibility)
@@ -354,10 +360,6 @@ The concatenation of files can result in max file size errors - even though the
       "type": "prepend-js",
       "target": "/path/to/target/file.js",
       "source": "/path/to/script/file.js"
-    },
-    {
-      "type": "webpack-ignore-vendors",
-      "report": "/path/to/webpack/stats.json"
     }
   ]
 }

package/dist/bin/jscrambler.js

@@ -10,7 +10,6 @@ var _filesizeParser = _interopRequireDefault(require("filesize-parser"));
 var _config2 = _interopRequireDefault(require("../config"));
 var _ = _interopRequireDefault(require("../"));
 var _utils = require("../utils");
-var _fs = _interopRequireDefault(require("fs"));
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
@@ -67,83 +66,53 @@ const validateBeforeProtection = function () {
   if (beforeProtectionArray.length === 0) {
     return;
   }
+  const mandatoryKeys = ['type', 'target', 'source'];
+  const usedTargets = new Set();
+  const usedSources = new Set();
   beforeProtectionArray.filter(element => {
+    // Check if every array element has a type, a target and a source
+    const validateMandatoryKeys = mandatoryKeys.every(key => key in element);
+    if (!validateMandatoryKeys) {
+      console.error('Invalid structure on beforeProtection: each element must have the following structure { type: "type", target: "/path/to/target", source: "/path/to/script"}');
+      process.exit(1);
+    }
     const {
+      target,
+      source,
       type
     } = element;
-    switch (type) {
-      case _utils.APPEND_JS_TYPE:
-      case _utils.PREPEND_JS_TYPE:
-        const mandatoryKeys = ['type', 'target', 'source'];
-        const usedTargets = new Set();
-        const usedSources = new Set();
 
-        // Check if every array element has a type, a target and a source
-        const validateMandatoryKeys = mandatoryKeys.every(key => key in element);
-        if (!validateMandatoryKeys) {
-          console.error('Invalid structure on beforeProtection: each element must have the following structure { type: "type", target: "/path/to/target", source: "/path/to/script"}');
-          process.exit(1);
-        }
-        const {
-          target,
-          source
-        } = element;
-
-        // Check if the provided files are js, mjs or cjs files
-        if (!(0, _utils.isJavascriptFile)(target) || !(0, _utils.isJavascriptFile)(source)) {
-          console.error("Invalid extension for beforeProtection (".concat(type, ") target or source files: only *js, mjs and cjs* files can be used to append or prepend."));
-          process.exit(1);
-        }
+    // Check if only valid types are being used
+    if (type !== _utils.APPEND_JS_TYPE && type !== _utils.PREPEND_JS_TYPE) {
+      console.error("Invalid type on beforeProtection: only \"".concat(_utils.APPEND_JS_TYPE, "\" or \"").concat(_utils.PREPEND_JS_TYPE, "\" are allowed."));
+      process.exit(1);
+    }
 
-        // Check if the target has already been used as a source
-        if (usedTargets.has(source)) {
-          console.error("Error on beforeProtection (".concat(type, "): file \"").concat(source, "\" has already been used as target and can't be used as source."));
-          process.exit(1);
-        }
-        if (usedSources.has(target)) {
-          console.error("Error on beforeProtection (".concat(type, "): file \"").concat(target, "\" has already been used as source and can't be used as target."));
-          process.exit(1);
-        }
+    // Check if the provided files are js, mjs or cjs files
+    if (!(0, _utils.isJavascriptFile)(target) || !(0, _utils.isJavascriptFile)(source)) {
+      console.error('Invalid extension for beforeProtection target or source files: only *js, mjs and cjs* files can be used to append or prepend.');
+      process.exit(1);
+    }
 
-        // Check if the target and source are the same
-        if (target === source) {
-          console.error("Error on beforeProtection (".concat(type, "): File \"").concat(target, "\" can't be used as both a target and a source."));
-          process.exit(1);
-        }
+    // Check if the target has already been used as a source
+    if (usedTargets.has(source)) {
+      console.error("Error on beforeProtection: file \"".concat(source, "\" has already been used as target and can't be used as source."));
+      process.exit(1);
+    }
+    if (usedSources.has(target)) {
+      console.error("Error on beforeProtection: file \"".concat(target, "\" has already been used as source and can't be used as target."));
+      process.exit(1);
+    }
 
-        // Add the target and the source to the corresponding sets
-        usedTargets.add(target);
-        usedSources.add(source);
-        break;
-      case _utils.WEBPACK_IGNORE_VENDORS:
-        if (!("report" in element)) {
-          console.error("Invalid structure on beforeProtection (".concat(type, "): \"report\" property is mandatory for this type"));
-          process.exit(1);
-        }
-        if (!_fs.default.existsSync(element.report)) {
-          console.error("Error on beforeProtection (".concat(type, "): source webpack report does not exist."));
-          process.exit(1);
-        }
-        const content = _fs.default.readFileSync(element.report, 'utf8');
-        let report;
-        try {
-          report = JSON.parse(content);
-        } catch (e) {
-          console.error("Error on beforeProtection (".concat(type, "): invalid source webpack report. Reason: ").concat(e.message));
-          process.exit(1);
-        }
-        element.excludeModules = new Map();
-        for (let module of report.modules) {
-          if (module.name && module.name.includes('/node_modules/')) {
-            element.excludeModules.set(module.id, module.name);
-          }
-        }
-        console.log("beforeProtection (".concat(type, "): Webpack report \"").concat(_path.default.basename(element.report), "\" was loaded"));
-        break;
-      default:
-        console.error("Invalid type on beforeProtection (".concat(type, "): only \"").concat(_utils.APPEND_JS_TYPE, "\", \"").concat(_utils.PREPEND_JS_TYPE, "\" or \"").concat(_utils.WEBPACK_IGNORE_VENDORS, "\" are allowed."));
-        process.exit(1);
+    // Check if the target and source are the same
+    if (target === source) {
+      console.error("Error on beforeProtection: File \"".concat(target, "\" can't be used as both a target and a source."));
+      process.exit(1);
     }
+
+    // Add the target and the source to the corresponding sets
+    usedTargets.add(target);
+    usedSources.add(source);
   });
   return beforeProtectionArray;
 };
@@ -180,6 +149,7 @@ config.skipSources = _commander.default.skipSources;
 config.debugMode = _commander.default.debugMode || config.debugMode;
 config.instrument = _commander.default.instrument || config.instrument;
 config.mode = _commander.default.mode || config.mode;
+config.globalNamesPrefix = _commander.default.globalNamesPrefix || config.globalNamesPrefix;
 
 // handle codeHardening = 0
 if (typeof _commander.default.codeHardeningThreshold === 'undefined') {
@@ -314,7 +284,8 @@ const {
   beforeProtection,
   deleteProtectionOnSuccess,
   mode,
-  saveSrc
+  saveSrc,
+  globalNamesPrefix
 } = config;
 const params = config.params;
 const incompatibleOptions = ['sourceMaps', 'instrument', 'startProfiling', 'stopProfiling'];
@@ -441,7 +412,8 @@ if (_commander.default.sourceMaps) {
       beforeProtection,
       deleteProtectionOnSuccess,
       mode,
-      saveSrc
+      saveSrc,
+      globalNamesPrefix
     });
     try {
       if (typeof werror !== 'undefined') {

package/dist/index.js

@@ -150,7 +150,7 @@ var _default = exports.default = {
       }
       if (runBeforeProtection.length > 0) {
         runBeforeProtection.map(element => {
-          if ((element.type === _utils.PREPEND_JS_TYPE || element.type === _utils.APPEND_JS_TYPE) && !_filesSrc.includes(element.target)) {
+          if (!_filesSrc.includes(element.target)) {
             console.error('Error on beforeProtection: Target files need to be in the files to protect list (or filesSrc).');
             process.exit(1);
           }
@@ -273,7 +273,8 @@ var _default = exports.default = {
       forceAppEnvironment,
       deleteProtectionOnSuccess,
       mode,
-      saveSrc
+      saveSrc,
+      globalNamesPrefix
     } = finalConfig;
     const {
       accessKey,
@@ -394,7 +395,8 @@ var _default = exports.default = {
       tolerateMinification,
       numberOfProtections,
       forceAppEnvironment,
-      mode
+      mode,
+      globalNamesPrefix
     });
     if (finalConfig.inputSymbolTable) {
       const inputSymbolTableContents = await _fs.default.promises.readFile(finalConfig.inputSymbolTable, 'utf-8');

package/dist/utils.js

@@ -3,22 +3,15 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.WEBPACK_IGNORE_VENDORS = exports.PREPEND_JS_TYPE = exports.APPEND_JS_TYPE = void 0;
+exports.PREPEND_JS_TYPE = exports.APPEND_JS_TYPE = void 0;
 exports.concatenate = concatenate;
 exports.getMatchedFiles = getMatchedFiles;
 exports.isJavascriptFile = isJavascriptFile;
 exports.validateNProtections = validateNProtections;
-exports.webpackAttachDisableAnnotations = webpackAttachDisableAnnotations;
-require("core-js/modules/web.dom-collections.iterator.js");
 var _glob = require("glob");
 var _fs = _interopRequireDefault(require("fs"));
 var _path = require("path");
-var _acorn = _interopRequireDefault(require("acorn"));
-var _acornWalk = _interopRequireDefault(require("acorn-walk"));
-var _magicString = _interopRequireDefault(require("magic-string"));
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-const debug = !!process.env.DEBUG;
-
 /**
  * Return the list of matched files for minimatch patterns.
  * @param {string} pattern
@@ -48,75 +41,6 @@ function validateNProtections(n) {
 }
 const APPEND_JS_TYPE = exports.APPEND_JS_TYPE = 'append-js';
 const PREPEND_JS_TYPE = exports.PREPEND_JS_TYPE = 'prepend-js';
-const WEBPACK_IGNORE_VENDORS = exports.WEBPACK_IGNORE_VENDORS = 'webpack-ignore-vendors';
-
-/**
- *
- * @param {source: string} beforeProtection
- * @param {string} cwd current working directory, passed by argument
- * @param {string} path file path (file being parsed)
- * @param {Buffer} buffer file contents
- * @param {string} fileName file name
- */
-function webpackAttachDisableAnnotations(beforeProtection, cwd, path, buffer, fileName) {
-  if (!isJavascriptFile(fileName)) {
-    return buffer;
-  }
-  const {
-    excludeModules
-  } = beforeProtection;
-  const sourceCode = buffer.toString('utf-8');
-  let tree;
-  try {
-    tree = _acorn.default.parse(sourceCode, {
-      ecmaVersion: 'latest',
-      range: true
-    });
-  } catch (e) {
-    console.log("Error on beforeProtection (".concat(WEBPACK_IGNORE_VENDORS, "): \"").concat(fileName, "\" could not be parsed."));
-    process.exit(1);
-  }
-  const appendDisableAnnotationAt = [];
-  _acornWalk.default.recursive(tree, null, {
-    Property(node) {
-      if (node.computed === false && node.shorthand === false) {
-        let moduleId;
-        if (node.key.type === 'Literal') {
-          moduleId = node.key.value;
-        } else if (node.key.type === 'Identifier') {
-          moduleId = node.key.name;
-        }
-        if (moduleId && excludeModules.has(moduleId)) {
-          appendDisableAnnotationAt.push(node.value.start);
-          if (debug) {
-            console.debug("beforeProtection (".concat(WEBPACK_IGNORE_VENDORS, "): ignoring ").concat(excludeModules.get(moduleId), " module on \"").concat(fileName, "\""));
-          }
-          return null;
-        }
-      }
-    }
-  });
-  if (appendDisableAnnotationAt.length > 0) {
-    const s = new _magicString.default(sourceCode);
-    for (const appendIndex of appendDisableAnnotationAt) {
-      s.appendLeft(appendIndex, '/* @jscrambler disable * */');
-    }
-    const sourceCodeWithDisableAnnotations = s.toString();
-    try {
-      // syntax check
-      _acorn.default.parse(sourceCodeWithDisableAnnotations, {
-        ecmaVersion: 'latest',
-        range: true
-      });
-    } catch (e) {
-      console.log("Error on beforeProtection (".concat(WEBPACK_IGNORE_VENDORS, "): unsupported structure on \"").concat(fileName, "\"."));
-      process.exit(1);
-    }
-    buffer = Buffer.from(s.toString(), 'utf8');
-  }
-  console.log("beforeProtection (".concat(WEBPACK_IGNORE_VENDORS, "): ").concat(appendDisableAnnotationAt.length, " module(s) ignored for \"").concat(fileName, "\""));
-  return buffer;
-}
 
 /**
  *

package/dist/zip.js

@@ -66,17 +66,9 @@ async function zip(files, cwd, runBeforeProtection) {
       } else {
         name = files[i];
       }
-      buffer = await fs.readFile(sPath);
+      buffer = fs.readFile(sPath);
       runBeforeProtection.map(element => {
-        switch (element.type) {
-          case _utils.APPEND_JS_TYPE:
-          case _utils.PREPEND_JS_TYPE:
-            buffer = (0, _utils.concatenate)(element, cwd, sPath, buffer, name);
-            break;
-          case _utils.WEBPACK_IGNORE_VENDORS:
-            buffer = (0, _utils.webpackAttachDisableAnnotations)(element, cwd, sPath, buffer, name);
-            break;
-        }
+        buffer = (0, _utils.concatenate)(element, cwd, sPath, buffer);
       });
     } else {
       // Else if it's a directory path

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "jscrambler",
-  "description": "Jscrambler API client.",
-  "version": "8.7.1-next.3",
+  "description": "Jscrambler Code Integrity API client.",
+  "version": "8.8.0",
   "homepage": "https://github.com/jscrambler/jscrambler",
   "author": "Jscrambler <support@jscrambler.com>",
   "repository": {
@@ -17,21 +17,10 @@
     "access": "public",
     "registry": "https://registry.npmjs.org/"
   },
-  "scripts": {
-    "clean": "rm -rf ./dist",
-    "build": "babel src --out-dir dist",
-    "watch": "babel -w src --out-dir dist",
-    "prepublish": "npm run build",
-    "eslint": "eslint src/",
-    "eslint:fix": "eslint src/ --fix"
-  },
   "engines": {
     "node": ">= 12.17.0"
   },
   "dependencies": {
-    "acorn": "8.14.0",
-    "acorn-walk": "8.3.4",
-    "magic-string": "0.30.15",
     "axios": "^1.7.7",
     "commander": "^2.8.1",
     "core-js": "3.38.1",
@@ -67,5 +56,13 @@
     "protect",
     "js",
     "javascript"
-  ]
-}
+  ],
+  "scripts": {
+    "clean": "rm -rf ./dist",
+    "build": "babel src --out-dir dist",
+    "watch": "babel -w src --out-dir dist",
+    "prepublish": "npm run build",
+    "eslint": "eslint src/",
+    "eslint:fix": "eslint src/ --fix"
+  }
+}