3 ms·

That will not pass integrity checks (the script inspecting its own code). It will also not work if the script is some initially obfuscated string that is passe

That will not pass integrity checks (the script inspecting its own code). It will also not work if the script is some initially obfuscated string that is passed to eval() or something more complex assembling the actual code on the fly.

8chanAnon 3y ago
>That will not pass integrity checks (the script inspecting its own code). I've not seen anything like that. The integrity checks are generally limited to verifying the document location and the presence of certain elements in the DOM. Obfuscation techniques have become so sophisticated that integrity checks are not really necessary. Bot challenges (such as the one used by CloudFlare) may go so far as to test graphic elements like the canvas to ensure that the JS is actually running in a browser but I don't think this is a common thing for the average website that just wants to keep bots from scraping them.
userbinator 3y ago
That will not pass integrity checks (the script inspecting its own code). As us "old school crackers" would say, "NOP those out!" As for obfuscation, you can unpack the scripts in order to do the needful, then use the proxy to "transparent redirect" requests for them to your own locally hosted unpacked and modded version.