jscrambler 8.7.1 → 8.8.1

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # jscrambler
 
+## 8.8.1
+
+### Patch Changes
+
+- [a5f9ae7]: Document globalNamesPrefix parameter
+
+## 8.8.0
+
+### Minor Changes
+
+- [477066b]: Added globalNamesPrefix config option to cli
+
 ## 8.7.1
 
 ### Patch Changes

package/README.md

@@ -25,6 +25,7 @@ If you're looking to gain control over third-party tags and achieve PCI DSS comp
     - [Profiling Data Mode (default: **automatic**)](#profiling-data-mode-default-automatic)
     - [Instrument (`--instrument`)](#instrument---instrument)
   - [Symbol Table](#symbol-table)
+  - [Global Names Prefix](#global-names-prefix)
   - [API](#api)
     - [Quick example](#quick-example)
   - [Jscrambler Parameters](#jscrambler-parameters)
@@ -392,6 +393,28 @@ Similarly, the resulting symbol table can be obtained using the `--output-symbol
 
 **NOTE**: It only makes sense to use symbol tables on protections that use the identifiers renaming parameter.
 
+## Global Names Prefix
+
+If you need to make **separate obfuscation requests** for source code that belong to the same application instance, there is a small chance that you will encounter a **naming collision** on the generate global names.
+
+To prevent **global naming collisions**, you can set the `globalNamesPrefix` parameter on each protection request:
+
+```json
+// jscrambler.json to protect micro-frontend 1
+{
+  "globalNamesPrefix": "p1"
+}
+
+// jscrambler.json to protect micro-frontend 2
+{
+  "globalNamesPrefix": "p2"
+}
+```
+
+If apply the previous configuration, all generated global variable names will start with the letters *p1* for *micro-frontend 1* and *p2* for *micro-frontend 2*.
+
+***Note***: The `globalNamesPrefix` parameter must be **short** and **unintelligible** to avoid code size increase and automated attacks
+
 ## API
 ```bash
 npm install jscrambler

package/dist/bin/jscrambler.js

@@ -149,6 +149,7 @@ config.skipSources = _commander.default.skipSources;
 config.debugMode = _commander.default.debugMode || config.debugMode;
 config.instrument = _commander.default.instrument || config.instrument;
 config.mode = _commander.default.mode || config.mode;
+config.globalNamesPrefix = _commander.default.globalNamesPrefix || config.globalNamesPrefix;
 
 // handle codeHardening = 0
 if (typeof _commander.default.codeHardeningThreshold === 'undefined') {
@@ -283,7 +284,8 @@ const {
   beforeProtection,
   deleteProtectionOnSuccess,
   mode,
-  saveSrc
+  saveSrc,
+  globalNamesPrefix
 } = config;
 const params = config.params;
 const incompatibleOptions = ['sourceMaps', 'instrument', 'startProfiling', 'stopProfiling'];
@@ -410,7 +412,8 @@ if (_commander.default.sourceMaps) {
       beforeProtection,
       deleteProtectionOnSuccess,
       mode,
-      saveSrc
+      saveSrc,
+      globalNamesPrefix
     });
     try {
       if (typeof werror !== 'undefined') {

package/dist/index.js

@@ -273,7 +273,8 @@ var _default = exports.default = {
       forceAppEnvironment,
       deleteProtectionOnSuccess,
       mode,
-      saveSrc
+      saveSrc,
+      globalNamesPrefix
     } = finalConfig;
     const {
       accessKey,
@@ -394,7 +395,8 @@ var _default = exports.default = {
       tolerateMinification,
       numberOfProtections,
       forceAppEnvironment,
-      mode
+      mode,
+      globalNamesPrefix
     });
     if (finalConfig.inputSymbolTable) {
       const inputSymbolTableContents = await _fs.default.promises.readFile(finalConfig.inputSymbolTable, 'utf-8');

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "jscrambler",
   "description": "Jscrambler Code Integrity API client.",
-  "version": "8.7.1",
+  "version": "8.8.1",
   "homepage": "https://github.com/jscrambler/jscrambler",
   "author": "Jscrambler <support@jscrambler.com>",
   "repository": {