Tag Info

New answers tagged

2

Firstly, you need to weigh up the cost/benefit of what you're trying to achieve. Generally preventing code theft by developers is a very steep uphill battle, but fortunately I don't think it's a very common problem. I can't think of many prominent examples of code theft except in some cases where very specific proprietary algorithms are involved, or ...


2

A source code disclosure vulnerability is an involuntary disclosure of source code. Since JavaScript code runs client-side, on the browser, it's disclosure is intentional. Under this definition, only exposure of the server-side code is a source code disclosure vulnerability. The example you give actually has the GPL on it, so it's already disclosed ...


4

That is the correct behavior. In the case of client-side JavaScript, it is by design that the script source is sent to the client to be executed. So, the fact that you can manually browse to the URL for the script file is irrelevant. It gives you no more access than the application intends for you to have. A source-code disclosure vulnerability is when ...


3

All your client side security efforts are doomed to failure. Obfuscation and hiding your source just isn't going to work. The more valuable the data you are working with the sooner your code is going to be reverse engineered. The only logical approach to consider everything client side public. Your approach should be to focus your security on server ...


0

If someone who does not understand your script runs it as a normal user, leaving these 'sudo's inside would give them the illusion that your script cannot do anything only a root user can while it actually can.


5

The security risks are in the sudoers file. if the sudoers file restricts the users to only safe operations and is either passwordless or requires a password every time. there is no danger. This means that the actions performed under sudo must safe and free from exploits like shell injection, alias or path attacks, and buffer-overun. where practical use ...



Top 50 recent answers are included