New issue
Advanced search Search tips

Issue 871741 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Aug 17
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Mac
Pri: 2
Type: Feature



Sign in to add a comment

How to restrict / hide souce code of extension

Project Member Reported by nturup@google.com, Aug 7

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.84 Safari/537.36

Steps to reproduce the problem:
1. I dont want to show my code to anyone
2. Need to popup error message while downloading
3. 

What is the expected behavior?

What went wrong?
currently user can downloading chrome extension source code from crx viewer i need to restrict that action

Did this work before? N/A 

Does this work in other browsers? N/A

Chrome version: 68.0.3440.84  Channel: stable
OS Version: 10.0
Flash Version:
 
It's not possible and it'll never be possible because extensions are essentially client-side JavaScript files which can be trivially accessed in the user profile folder, and inside the browser itself using devtools for any extension page including the popup and the background page.
Labels: Needs-Triage-M68
Cc: susan.boorgula@chromium.org
Components: Platform>Extensions
Labels: -Type-Bug Triaged-ET Target-70 M-70 FoundIn-70 OS-Linux OS-Mac Type-Feature
Status: Untriaged (was: Unconfirmed)
nturup@ Thanks for the issue.

From the above description, this looks like a feature request to restrict/hide source code of extension.
Hence marking this as Untriaged for further updates from Dev.

Thanks..
Agreed with comment #1, client side JS is by design like this and this should be WAI. Should we close this?
Status: WontFix (was: Untriaged)
Yes.  As mentioned above, this is pretty much fundamentally impossible.  Extensions are written in an interpreted language (JS) and executed client-side.  This means that the code will always be able to be viewed by the user, and reasonably easily reverse-engineered.  This is the same for code used in the web.

Sign in to add a comment