eval concealing program in JGraph compared to obfuscation and packing

Question

eval concealing program in JGraph compared to obfuscation and packing

Many times when the topic of eval is brought up, the response is always the same - avoid using eval. However, I believe there is a valid reason for eval to exist. Nevertheless, there are numerous pitfalls to consider.

Regarding jgraph - why do they incorporate eval in this example? Is it sensible to use eval for code concealment, especially when there are obfuscation and packing tools available for JavaScript? Is this the only practical application?

Considering the significant financial stakes involved, I trust they are knowledgeable in their choices.

javascript eval

Answer 1

Answer №1

There is a significant amount of money at stake, so it's safe to say they are knowledgeable about their actions.

Actually, it's not quite effective. This measure is essentially futile when it comes to preventing plagiarism from JavaScript developers. It only adds about 30 seconds to the process of accessing the de-obfuscated code. For example, if I were to visit http://jsFiddle.net or http://jsbin.com and input the following code into the JavaScript box:

var txt = "textContent" in document.body ? "textContent" : "innerText",
    eval = function (s) { document.body[txt] = s; }

Then, I could simply copy and paste the code from that site into the fiddle and run it. This would display all the code on the page, allowing me to copy and paste it into . There are various other methods to extract the code as well. One could easily copy and paste the string into any developer tools console window to get the desired output.

While obfuscation serves a purpose, implementing an additional layer using eval seems amateurish and signifies a desperate attempt to conceal their valuable source code. This practice does not demonstrate expertise on their part.

Answer 2

There is a significant amount of money at stake, so it's safe to say they are knowledgeable about their actions.

Actually, it's not quite effective. This measure is essentially futile when it comes to preventing plagiarism from JavaScript developers. It only adds about 30 seconds to the process of accessing the de-obfuscated code. For example, if I were to visit http://jsFiddle.net or http://jsbin.com and input the following code into the JavaScript box:

var txt = "textContent" in document.body ? "textContent" : "innerText",
    eval = function (s) { document.body[txt] = s; }

Then, I could simply copy and paste the code from that site into the fiddle and run it. This would display all the code on the page, allowing me to copy and paste it into . There are various other methods to extract the code as well. One could easily copy and paste the string into any developer tools console window to get the desired output.

While obfuscation serves a purpose, implementing an additional layer using eval seems amateurish and signifies a desperate attempt to conceal their valuable source code. This practice does not demonstrate expertise on their part.

Answer 3

Answer №2

Utilizing eval opens up a plethora of possibilities! There are instances where it may be the only solution.

However:

Code executed with eval may be slower
Debugging errors in evaluated code can be difficult without line numbers
Overusing eval can lead to unreadable code

Here's an example of something that would be challenging to achieve without eval:

var varname = "X";
var varvalue = 5;
eval("var "+varname+" = "+varvalue+";");
console.log(X);

Answer 4

Utilizing eval opens up a plethora of possibilities! There are instances where it may be the only solution.

However:

Code executed with eval may be slower
Debugging errors in evaluated code can be difficult without line numbers
Overusing eval can lead to unreadable code

Here's an example of something that would be challenging to achieve without eval:

var varname = "X";
var varvalue = 5;
eval("var "+varname+" = "+varvalue+";");
console.log(X);

eval concealing program in JGraph compared to obfuscation and packing

Answer №1

Answer №2

Similar questions

`Monitoring and adjusting page view during window resizing in a dynamic website`

Generate a dynamic file import loop within a React application

Is there a way for me to retrieve the pageProbs that I have shared with a Component in _app.js?

In JavaScript, the task involves filtering through multiple arrays of objects to calculate the average value based on the contract number

Unable to find the desired match with Regex

In Javascript, what significance does the symbol ":" hold?

Utilizing Node and Express to transform an array into a "Object" Map

Error message: Unchecked runtime error - Unable to retrieve data from the specified URL. The extension manifest must include permission to access this particular host. This issue is occurring in manifest

A guide on using jQuery to iterate through 3 separate div elements

Retrieve the database value for the chosen name and then add that name to a different table

Numerous HTML documents being uploaded to the server for a multitude of individuals

Retrieving information from JSON files related to table objects

Steps for Implementing a Delay on Bootstrap Dropdown Hover

What is the best way to handle an AJAX JSON response in AngularJS?

Leverage the power of Angular's library dependency injection with the @inject

Achieve seamless integration of PHP function execution with Javascript onClick without the need for page

Create a customizable table without relying on external jQuery plugins

Exploring the usage of multidimensional arrays in React components

What may be causing my Ajax call to get stuck at readystate 1 and not progress further

Creating reactive data in a Vue.js 2 component