Everyone,

All those people asking questions about security and safety on the client
side (javascript, browser stuff), just forget it. You can't prevent the user
anything by using client side technology.
remember, there's always telnet to port 80 ;-)

Geert Van Damme



> -----Original Message-----
> From: A mailing list about Java Server Pages specification and reference
> [mailto:[EMAIL PROTECTED]]On Behalf Of Miao, Franco CAWS:EX
> Sent: vrijdag 26 oktober 2001 0:21
> To: [EMAIL PROTECTED]
> Subject: Re: hide JavaScript ?
>
>
> for your information,
>
> <script src="hidden.js" language="JavaScript"></script>
> Unfortunately, the src= attribute inside the <script> tag isn't supported
> universally, which means that the page won't work in some of the older
> browsers.
>
>
> Franco
>
>
> -----Original Message-----
> From: Syed Rehman [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, October 25, 2001 3:11 PM
> To: [EMAIL PROTECTED]
> Subject: Re: hide JavaScript ?
>
>
> Hello Franco:
>
> If a site is designed well, all the business logic should be hidden in
> objects that a user coming to your website will not be able to
> see. I don't
> think sharing my way of accessing form elements on a different window for
> example is going to get me fired.
>
> What kind of error message? The following line works for me:
>
> <script language=javascript src="../Utilities/Tools.asp"></script>
>
>
> Where the tools.asp file contains javascript functions.
>
>
> Syed
>
>
>
> -----Original Message-----
> From: Miao, Franco CAWS:EX [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, October 25, 2001 4:51 PM
> To: [EMAIL PROTECTED]
> Subject: Re: hide JavaScript ?
>
>
> i agree your intention, but you should realize business
> production eniroment
> is totally different ball game from open source development, we should
> discuss both code develpement and code security issue here.
> Simplely say if
> you might get fired by let people see your code in brower, who
> will like to
> hire you since your development is so unsecure? Also how to
> enhance security
> in code- base also is very important topic to all developer. am I right?
>
> Actually I did what you recommend, but no luck. I know you tried to say
> server side scripting, but got error message.
>
> Franco
>
> -----Original Message-----
> From: Syed Rehman [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, October 25, 2001 2:36 PM
> To: [EMAIL PROTECTED]
> Subject: Re: hide JavaScript ?
>
>
> Hello All:
>
> Since this is a discussion group I will start this thread.
>
> One of the advantages of an open development environment is the
> sharing and
> re-use of code. And you never know, someone might even be able to
> "enhance"
> a piece of code you have written.
>
> Maybe we should all concentrate more on writing concise,
> functional code and
> spend less time worrying about who might be able to see it and learn from
> it.
>
> Now, to answer your question Franco, if you make the extension of your
> include files .asp/.jsp instead of .js the browser will not allow
> anyone to
> download your file. But I recommend against using this "trick" to hide
> javascript code.
>
> Syed
>
>
> -----Original Message-----
> From: Miao, Franco CAWS:EX [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, October 25, 2001 4:22 PM
> To: [EMAIL PROTECTED]
> Subject: hide JavaScript ?
>
>
> How to hide JavaScript, disallow people see the source code with Brower's
> source manus?
>
> Franco
>
> ==================================================================
> =========
> To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff
> JSP-INTEREST".
> For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST
> DIGEST".
> Some relevant FAQs on JSP/Servlets can be found at:
>
>  http://archives.java.sun.com/jsp-interest.html
>  http://java.sun.com/products/jsp/faq.html
>  http://www.esperanto.org.nz/jsp/jspfaq.jsp
>  http://www.jguru.com/faq/index.jsp
>  http://www.jspinsider.com
>
> ==================================================================
> =========
> To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff
> JSP-INTEREST".
> For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST
> DIGEST".
> Some relevant FAQs on JSP/Servlets can be found at:
>
>  http://archives.java.sun.com/jsp-interest.html
>  http://java.sun.com/products/jsp/faq.html
>  http://www.esperanto.org.nz/jsp/jspfaq.jsp
>  http://www.jguru.com/faq/index.jsp
>  http://www.jspinsider.com
>
> ==================================================================
> =========
> To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff
> JSP-INTEREST".
> For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST
> DIGEST".
> Some relevant FAQs on JSP/Servlets can be found at:
>
>  http://archives.java.sun.com/jsp-interest.html
>  http://java.sun.com/products/jsp/faq.html
>  http://www.esperanto.org.nz/jsp/jspfaq.jsp
>  http://www.jguru.com/faq/index.jsp
>  http://www.jspinsider.com
>
> ==================================================================
> =========
> To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff
> JSP-INTEREST".
> For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST
> DIGEST".
> Some relevant FAQs on JSP/Servlets can be found at:
>
>  http://archives.java.sun.com/jsp-interest.html
>  http://java.sun.com/products/jsp/faq.html
>  http://www.esperanto.org.nz/jsp/jspfaq.jsp
>  http://www.jguru.com/faq/index.jsp
>  http://www.jspinsider.com
>
> ==================================================================
> =========
> To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff
> JSP-INTEREST".
> For digest: mailto [EMAIL PROTECTED] with body: "set
> JSP-INTEREST DIGEST".
> Some relevant FAQs on JSP/Servlets can be found at:
>
>  http://archives.java.sun.com/jsp-interest.html
>  http://java.sun.com/products/jsp/faq.html
>  http://www.esperanto.org.nz/jsp/jspfaq.jsp
>  http://www.jguru.com/faq/index.jsp
>  http://www.jspinsider.com
>

===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST DIGEST".
Some relevant FAQs on JSP/Servlets can be found at:

 http://archives.java.sun.com/jsp-interest.html
 http://java.sun.com/products/jsp/faq.html
 http://www.esperanto.org.nz/jsp/jspfaq.jsp
 http://www.jguru.com/faq/index.jsp
 http://www.jspinsider.com

Reply via email to