Best practices for securing javascript files on website and iFrame question

[K7S]

Hi there,
Thanks for your time I do appreciate it.
I’m wondering if there are some best practices or verified obfuscator’s that the Apex team employs to keep javascript files and other important documents safeguarded from being downloaded by an unauthorized user.

While I know the answer to this question truthfully is “It’s impossible”; and there’s probably better places to ask, I’m wondering if there are some safeguards or practices that you guys might know about specifically from your experiences that could help if shared. I have a feeling some of you may have experience on this topic and can guide me in the right direction.

More specifically, I want to host an .html and .js file on my server that can be accessed through the X Theme framework, but relatively safe from being downloaded by most casual computer users.

Second question is does the Theme X have an iFrame option? Should I be looking at shortcodes? Anyone know of one? The purpose being, to display the html/js in my first question.

[mldarshana]

Hi There @K7S

Thanks for writing in! JavaScript is rendered on the client side (web browser), so the JS files or code is visible to users. There are things you can do like prevent right click for the users, but advanced users can avoid those blocks. You can read more information from here (https://stackoverflow.com/a/29092743/1978139).

You can use iFrame tag within WordPress editor (Text mode) or if you want use it within Cornerstone builder, you can use Raw Content element and place your iFrame code there.

Hope that helps.

[K7S]

Much appreciated for the info. Thank you

[nabeel]

You’re most welcome!