React Armor: Protect your DOM from third-party tampering
1–10 of 55 posts
Re: React Armor: Protect your DOM from third-party tampering
#2The end of transparent web source code. I hate this. :(
Re: React Armor: Protect your DOM from third-party tampering
#3I know this is malicious to those who want the web to be open, but I love it. Not because I particularly agree with the motive, but it's just such a cool demonstration of the power of React. Doing this has never been so easy. Google has been doing this for a while for a few of their products (Google Plus is one of them, I believe), but they've got large engineering teams who can commit time and resources to protecting data.
If you have a justifiable business reason for doing this, then your life just got a little easier. I think this would also help against some forms of XSS too - so there's some silver lining for you.
Re: React Armor: Protect your DOM from third-party tampering
#4Hooray, get ready for broken websites with modal overlays, CSS popups, ads, and tracking built-in, and no way to disable them!
Re: React Armor: Protect your DOM from third-party tampering
#5Performance would probably not suffer at all...
EDIT: But if you really want to make this a useful lib, bake in a way to disable the `armor` for debugging/development.
Re: React Armor: Protect your DOM from third-party tampering
#6The end of transparent web source code. I hate this. :(
Don't be so sure. This will push the client authentication problem further up the stack.
Re: React Armor: Protect your DOM from third-party tampering
#7This is kind of gross.
Pretty sure this is why we need shadow dom.
Re: React Armor: Protect your DOM from third-party tampering
#8Hooray, get ready for broken websites with modal overlays, CSS popups, ads, and tracking built-in, and no way to disable them!
Hm, why wasn't this possible before though? seems like something every ad company would have built already, given the presence of ad-blockers, etc.
Re: React Armor: Protect your DOM from third-party tampering
#9This is such a horrendous idea. Apart from the fact that this does virtually nothing, this is a prime example of the difference between security and obscurity and how neither is the other.
Re: React Armor: Protect your DOM from third-party tampering
#10This should be called React Obfuscate rather that React Armor.
I've done a fair amount of web scraping before and each of their tricks can be broken with enough care. Obfuscating html not only breaks many of the good things about the web but also makes things harder to debug.