AJAX - The Complete Reference

(avery) #1

PART II


Chapter 7: Security Concerns 297


It is pretty clear what is happening here and, while it looks nasty, this layer of protection
would take mere moments to remove. The decoding system could be hidden a bit amongst
purposefully cluttered code and then encoded, maybe in a base64, or even encrypted using
a simple encryption algorithm.

You can try to go farther and farther to the point of employing some browser-native
encoding or some fancy form of encryption, but this may still not be that useful for serious
protection. For example, note that even the encoding schemes supported natively by some
browsers like Microsoft’s Script Encoding as shown next are easily broken as revealed by a
Google query (http://www.google.com/search?hl=en&q=Microsoft+Script+Encoder+Decode).
Free download pdf