S
S
Sergey Z2018-04-21 21:10:16
css
Sergey Z, 2018-04-21 21:10:16

How to protect the site from downloading through the inspector?

Presumably, you can also download HTML, CSS and JS files. Is it possible to somehow protect yourself from this if the site is not tied to the backend in any way, only hosting?

Answer the question

In order to leave comments, you need to log in

7 answer(s)
A
Alexey Yarkov, 2018-04-21
@Serged

And again they are trying to protect super secret developments =)
No, you can’t protect. To display the site, the browser must download all the necessary files. And accordingly, when the site is loaded, the files are already on the user's computer.

X
xmoonlight, 2018-04-21
@xmoonlight

The question is interesting and it is on par with encryption, which is currently used in HTTPS and API message signing protocols.
You can encrypt it so that the browser downloads it, then decrypts it in memory and launches it - you can. You can even overtake signatures in asm.js and launch all functions through it.
Yes, it will sweep away all those who came to copy-paste and this is 95-99%.
But this does not prevent the remaining 1-5% from still picking up the working code if it is VERY interesting. But on the other hand: with this 1-5% it will be easier to create something more masterpiece than your product.
Bottom line: yes, you need to do it, because. the logic is the same as with SSL: protection is not 100% (like everywhere else now!), but the difficulty of finding the right key is high.
Here is an example of how to do it)

L
latteo, 2018-04-22
@latteo

As I understand it, the inspector is understood as Chrome DevTools or similar tools in other browsers.
Specifically, in chrome, it is quite difficult to sniff WebSockets done through Socket.IO with adding to the page through events. And when saving to har, this data is not written to the file.
Bypass - to do parsing through writing JS to run in the Chrome DevTools console - this is already a good screening, not everyone will bother like that.

E
eyyuioa, 2018-04-21
@eyyuioa

Make the code unreadable before uploading to the server)

S
spaceatmoon, 2018-04-21
@spaceatmoon

Many say it's impossible. But you can make life very difficult for both "thieves" and yourself.
Display your site entirely in Canvas. On Badoo, profile pictures that scroll in the slider are displayed in Canvas.

O
Oleg, 2018-04-22
@402d

from Google with Yandex too?
so that you don't create. Normal parsers will take the content after all js scripts have been processed

D
Dmitry Pacification, 2018-04-26
@dmitry_pacification

What's the point of doing this? Upload to bitbucket, and in which case you have a proof that you developed it .... especially if you actually committed something there.
Obfuscate js variables and css classes (I know what you can do in React. If there is no React, I think it will not be difficult to create a js script yourself) It just makes sense to suffer so much if there is a simple site? ))

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question