Latest version of Stunnix JavaScript Obfuscator

Stunnix JavaScript Obfuscator has been released about 5 years ago, so we keep history of its improvement here.

New features in version 4.2

• Now utf byte order marker at the top of html or xml files (3 characters) is handled correctly even if converting characters to entities was enabled
• When minifying local vars via YUI Compressor is enabled, YUI compressor does not give up on files with utf8 encoding.
• ASP files containing #include directives can now be protected with "ENCODED: serverside JavaScript" mode too.
• Project Manager GUI now ignores case of filenames on filesystems that are not case-sensitive. So e.g. if one removes file "todo.html" from project input directory and then creates "TODO.html", Project Manager won't show file "TODO.html" as "not in the project".

New features in version 4.1

• GREAT NEW FEATURE Now YUI JavaScript Compressor can optionally be invoked to minimize names of local variables, while applying usual symbol name mangling for all other symbols, resulting in much more compact code. A modified version of YUI Compressor has been included with the JavaScript Obfuscator package, there is no need to download or install it.
• Now package optimized for Mac OS X is available (in the form of application bundle).
• Now patching trial into non-trial is performed using Project Manager GUI (using Tools ⇒ Upgrade into non-trial.. menu item).
• Build Results screen of Project Manager now has shortcuts for all menu items in the Build menu - now you can rebuild the project without switching to "main" screen just to click "Rebuild changed" there.
• Fixed minor issues with building the project in Project Manager.
• Fixed an issue with RUNAT attribute (it was only recognized when used in lowercase due to a new features implemented in previous versions).
• Project Manager now shows samples of output for each mode selection dialog invoked via Settings ⇒ Select preset for.. menu item.
• Now Perl 5.10.x is also supported.

New features in version 4.0

• Project Manager got nicer look.
• Now it's really possible to preserve case of tag names of markup.
• Fixed severe bug with <% option explicit %> being put ahead of non-asp blocks (like SSI).
• Now asp blocks can be inside of attribute name, like this: <a <% blah() %>ref=/>

New features in version 3.9

• Now Project Manager GUI allows to easily generate list of symbols of some API (e.g. used in the project's code). Just put the library public API definitions (or even implementation files for the public classes of the library) alone to any directory, go to Tools->Extract symbols from directory with source files and specify the name of that directory and types of symbols you wish to extract (global functions, global variables, method names etc). Then paste the list of symbols it found into Symbols->User-specified exceptions.
• Several minor fixes and improvements in the Project Manager GUI.

New features in version 3.8

• Now any type of ASP Classic page can be encoded entirely, turning any ASP page into a page with just one block of ASP code and no markup at all.
• Project Manager GUI has been greatly improved, now it's much more intuitive to use..

New features in version 3.7

• Added support for protecting JavaScript embedded into string constants of any programming language like C#, Java or C++ (i.e. in .cpp, .aspx.cs, .java files). See more details in the overview
• Several minor fixes and improvements in the Project Manager GUI.

New features in version 3.6

• Added option entities-percentage to HTML protection engine that specifies percentage of characters to be replaced with entities in web documents (html/asp/php) if such replacement is enabled. In previous versions, all characters were being replaced with entities if such replacement was enabled.
• Added ability to control the case of characters used in attribute names and tag names - the characters can be lowercased, uppercased or their case can be randomized (options transform-attrnames and transform-tagnames). In previous versions, all characters were being lowercased.
• Several minor fixes and improvements in the Project Manager GUI.

New features in version 3.5

• Added support for converting all text (except markup) and values of html tag attributes inside .html/.asp/.php/etc files into character references (e.g. "abc" gets replaced with "&#x61;&#x62;&#x63;"). Here is a sample file before that transformation:
  

  some text	<span class=some-class>here</span>
  
  		Here is a <button class=other-class name=blah>link to our site</input>
  
  
  Some text.
  
  Again some text.
  

  And here is same piece after transformation:
  

  &#x73;&#x6f;&#x6d;&#x65;&#x20;&#x74;&#x65;&#x78;&#x74;&#x09;<span class="&#x73;&#x6f;&#x6d;&#x65;&#x2d;&#x63;&#x6c;&#x61;&#x73;&#x73;">&#x68;&#x65;&#x72;&#x65;</span> &#x09;&#x09;&#x48;&#x65;&#x72;&#x65;&#x20;&#x69;&#x73;&#x20;&#x61;&#x20;<button class="&#x6f;&#x74;&#x68;&#x65;&#x72;&#x2d;&#x63;&#x6c;&#x61;&#x73;&#x73;" name="&#x62;&#x6c;&#x61;&#x68;">&#x6c;&#x69;&#x6e;&#x6b;&#x20;&#x74;&#x6f;&#x20;&#x6f;&#x75;&#x72;&#x20;&#x73;&#x69;&#x74;&#x65;</input> &#x53;&#x6f;&#x6d;&#x65;&#x20;&#x74;&#x65;&#x78;&#x74;&#x2e; &#x41;&#x67;&#x61;&#x69;&#x6e;&#x20;&#x73;&#x6f;&#x6d;&#x65;&#x20;&#x74;&#x65;&#x78;&#x74;&#x2e;
  

  As you can see, even values of attributes have been replaced with numeric character entities.
• Improved algorithm for generation of replacement identifiers for all manglers except "md5" and "prefix" (now names are more random).
• Improved support for scripts saved in utf8 encoding.
• Improved language syntax support.
• A lot of minor fixes and improvements in the Project Manager GUI.

New features in version 3.4

• New in this version is improvement in Project Manager - now it's possible to specify rules (in form of filename patterns and corresponding processing mode) on how to handle files in the Project Directory that are not registered in the project. This allows to generate buildscript only once, and use it for frequent rebuilding of the projects in which new source files are introduced or removed very frequently.

New features in version 3.3

• Names of MSIE-specific properties of Style object have been added to the list of reserved names for client-side web scripts;
• Usability and minor improvements to Project Manager GUI;
• Improvements in documentation and very minor fixes in the code;

New features in version 3.2

• Scripts created by Visual Studio 2005 are correctly supported (unicode byte order marker is preserved).
• Scripts that use raw utf8 are correctly supported now.
• Better support for 'try' block.
• Improved support for regular expressions with modifiers.
• Now Project Manager shows 'Makefile' in the list of project's files.
• Project Manager now recognizes more file extensions as containing scripts.
• When building projects using Project Builder, file and directory permissions are copied from corresponding objects in the project input directory.

New features in version 3.1

• Implemented different algorithm of encoding of JavaScript code - now code encoded with it self-decodes 100times faster than code encoded using previous versions of JS-Obfus.
• Use default browser on Windows instead of always using MSIE.
• Fixed a bug with javascript pieces as values of html attributes.

New features in version 3.0

• Now JS-Obfus perfectly detects locations at which statements are terminated, and automatically inserts semicolon if it's missing, using extrernal JavaScript parser implemented in C (available for Windows, MacOSX and Linux/x86). This means that manual insertion of ";" in a few places is no more required. Use of external parser can be turned off using --skip-external-parser commandline option.
• 'm' modifier is now recognized for regular expressions.
• <asp:XXX> family of ASP.NET tags is now correctly handled in asp.net (.aspx) files.
• Added support for switching Encoding profiles to Project Manager GUI - now the options of how encoding is performed can be altered in a user-friendly way using new menu item "Project"->"Switch mode for encoding of code".
• Added 3 new choices into list of modes shown in "Project"->"Switch debugging/production mode for code mangling.." menuitem - ones that don't modify symbols at all.
• Added pre-defined mode "standard: encoded .js files with raw code" for greater convenience.
• Now GUI can run on more Windows boxes with incorrectly-implemented firewalls due to upgrade to latest version of Stunnix Perl Web Server.

New features in version 2.8

• AJAX-related symbols are in default exception list now (i.e. one doesn't have to add them manually to the list of exceptions).
• When jamming spaces in code that is inside SCRIPT tag, insert newlines before and after html comment delimiters, if present.
• Support multiplie CDATA blocks inside script fragments (before, only single CDATA block was supported).
• Added some MSIE-specific symbols to default list of exceptions.
• Host-based licensing conditions assertters are turned off if document as loaded from host with IP address 127.0.0.1 or from local file.

New features in version 2.7

• Support for conditional compilation found in Microsoft JScript added.
• Now it's possible to specify original file's input character encoding using --input-encoding commandline option - this makes encoding of JavaScript files containing foreign languages possible.
• A lot of JScript-specific symbols were added to the list of exceptions.
• Symbols that are extracted from html files (form field and form names, IDs of elements) are automatically added to the list of exceptions.
• One important and several almost non-important bugs were fixed in this version.
• "Project->Quit GUI" menuitem was added to Project Manager GUI.

New features in version 2.6

• Bug with handling files with something before DOCTYPE declaration was fixed (bug was introduced in version 2.5).
• Non-standard syntax of SSI #include command - use of spaces between <!-- and '#' - is now correctly supported too.
• Most recent version of Stunnix Perl Web Server is used now for running Project Manager GUI interface - this means improved stability of Project Manager GUI.

New features in version 2.5

• Banners and all utility scripts are inserted after DOCTYPE declaration in files containing xml or html markup.
• Ability to remove html comments was added - see option remove-comments for asp, html and asp.NET extractors.
• Ability to not protect any scripts at all in files containing html markup was added - see option no-code for html extractors.
• Ability to transform comments (e.g. keep only newlines in them or replace all non-whitespace characters in them with 'x') was introduced - see commandline option --transform-comments (corresponding popup added to Project Manager of course too).
• Now line numbers of source protected in debugging mode will match line numbers of original files (raw scripts or code in .html) - this makes it easy to locate line that caused error in original code using error message produced for protected code.
• Now get-idents-from-html.pl utility by default merges the symbols it extracts with symbols already listed in its output file. This can be turned off using its --do-not-merge commandline option.
• More MSIE-specific client-side functions and objects are recognized, including ones for Filters and Transformations.
• Now profile for protecting code (mangling engines for symbols, strings, numbers, jamming of spaces and stripping of comments) can be switched in 2 clicks using Project-}"Switch debugging/production mode for code mangling" menu item (for newly-created projects only!).
• Each newly-created project gets two debugging modes, one (the default) tries to keep line numbers in sync with original code (by not performing jamming) and other that jams spaces everywhere.
• Now profile for mangling spaces around html markup and removing html comments can be switched in 2 clicks using Project-}"Switch mode for mangling html markup around code" menu item affecting all files that contain html markup.
• Each newly-created project gets modes that produce encoded client-side and server-side scripts.
• Each newly-created project gets modes that allow to mangle html files without protecting scripts in them and/or extracting identifiers of html client-side or server-side objects.
• Each newly-created project gets mode for obfuscation of scripts in SVG files.
• Bug with extracting identifiers from html was fixed (when all previously accumulated identifers were lost if rebuilding only changed files or if project contained files with different modes of extraction of identifiers (e.g. some file with client-side identifiers extracted, other files with only server-side ones extracted) ).
• Display of autoextracted identifiers was fixed in Project Manager.
• Projects managed using Project Manager can now contain files with names starting with dot.
• Project Manager now allows to rename a member of project in its metadata (using Project-}Files menuitem).
• Now it's possible to specify command to invoke before building the project and a command to invoke after building the project using Project-}Options settings.
• Assigning mode in Project-}Files now has improved GUI.
• Status of project building operation is now shown in distinct colors in Build Log Window.
• A lot of bugfixes in Project Manager that fixed inability to set some specific values for some options.
• Added Frequently Asked Questions and Answers to documentation.
• Better support for some language constructs.

New features in version 2.4

• Project Manager now allows to remove files from project that are already absent in the project input directory.
• Now Project Manager allows to have arbitrary number of files in the project that are to be scanned for identifers of html nodes and form elements.
• Due to improvements in Stunnix Perl Web Server Project Manager now runs more reliably on Windows computers with incorrect network settings.
• Various bugfixes and improvements all over the code and documentation.

New features in version 2.3

• Exceptions for WMI (Windows Management Infrastructure) added, now they are automatically activated when 'wsh' profile is selected.
• Added support for obfuscating dynamic JavaScript inside "print-like" statements of almost any serverside language like ASP,JSP,PHP,C/C++,Perl or others or inside "print"-like functions of client-side JavaScript.
• Improved support for some JSP tags.
• Servermode "multifile" now supports filelist parameter - this allows you to specify names of files to process in the dedicated file, one per line, without specifying them as commandline arguments (and commandline can become too long to be supported by the OS).
• Now Project Manager can be used to build projects containing arbitrary huge number of files without pushing OS's limits of the maximum number of commandline arguments supported.
• Exceptions can now be stored in files with any type of newline characters.
• Options were reordered on the "mode options" page in Project Manager.
• Various bugfixes and improvements all over the code and documentation.

New features in version 2.2

• Parsing of inline regular expressions is now consitent with that of major browsers. Because of this default value for handling of inline regular expressions is changed to 'enable' (from 'disable').
• Improved support for XHTML parsing.
• Improved support for versioned language names (as value of attribute language of script html tag).
• Added checkbox to preserve comments in scripts to Project Manager option pages.
• Now JavaScript Obfuscator can be installed into the directory with name containing space characters.
• The 'prefix' symbol name obfuscator now uses string 'ReplacementFor_' as default value of prefix instead of Z439Z_.
• Miscellaneous fixes and improvements all over the code and documentation.
• Trial version of JavaScript obfuscator is now available.

New features in version 2.1

• Bug in support for several ASP/PHP/SSI blocks inside a script block was fixed.
• scripts as destination of links (e.g. <a href='javascript:some_code()'>) are now also fully supported in html.
• Shortcut for starting Project Manager by double-clicking on MacOSX was added (/bin/startui.command).
• Miscellaneous fixes and improvements all over the code.

New features in version 2.0

• Project Manager - an advanced intuitive cross-platform graphical user interface, that internally is implemented as dynamic web site running localy on user's computer using Stunnix Perl Web Server, was added.
• Added ability to process several files per invokation via use of -S commandline option.
• Added exceptions for MSIE-specific DOM implementation.
• Added support for MSIE-specific html attributes that can contain scripts.
• Added support for user-specified symbol mapping via -F commandline option.
• Added support for ensuring that symbols produced by combs and md5 symbol manglers are unique across entire project via adhere-mapfile option of these symbol manglers.
• Added ability to generate list of symbols from ActiveX and OLE components (available in Project Manager when run on Windows platform).
• Greatly improved support for XML documents containing scripts.
• Streamlined installation procedure by renaming 'setup' to 'setup.pl' - now it's possible to install the product by double-clicking on the 'setup.pl' instead of opening console window.
• Miscellaneous fixes and improvements all over the code.

New features in version 1.9

Minor improvements all over the code were made.

New features in version 1.8

New features in version 1.7

• Greatly improved support for protection of client-side and server-side javascript code inside HTML/ASP/PHP files - now it's at the state of the art level. Now HTML files in which scripts are protected can contain SSI/ASP/PHP fragments in them at any location - inside scripts (even inside string constants of the script!), inside event handlers and inside html markup (i.e. between < and >) - the feature available only in Stunnix JavaScript Obfuscator.
• Now it's possible to minimize size of html in HTML/ASP/PHP files by removing extra spaces and newlines in the html text itself - by the use of option pack-html for html/ASP/ASP.NET extractors.
• Greatly extended support for ensuring licensing conditions in ASP server-side scripts - new asserters were added.
• Now it's possible to mark individual <SCRIPT> sections in HTML/PHP/ASP/ASP.NET files as not to be processed by JavaScript Obfuscator by adding attribute with name specified using skip-script-mark-attibute option of corresponding extractor.
• All commandline parameters that specify names of files with lists of symbols (like --excludeidentsfile) now can take name of the directory - in that case symbols are loaded from all files located in that directory and its subdirectories.
• Added new engine for symbol name obfuscation that produce much more cryptic identifiers than 'md5' engine (looking like IlIIl), named 'combs'. The 'shortest' engine got similar functionality too, it can be used as a reliable version of 'combs' engine for multimodule projects.
• Support for specifying list of suffixes that should be preserved in mangled identifiers, specified via commandline option --suffixes-asis-list, was added.
• Support for recognition of inline regular expressions is now turned off by default, one has to explicitly enable it by using corresponding commandline option.

New features in version 1.6

Support for using case-insensitive exception lists was added - it is very useful for specifying properties and methods of ActiveX objects. Specify the file names to treat as case-insensitive exceptions after --excludeidentsfile-anycase switch to JavaScript Obfuscator.

The code and documentation as always undergone polishing.

New features in version 1.5

Support for encoding only some fragments of the source code was added. This mode of operation is activated by passing -E code switch to JavaScript Obfuscator.

The code and documentation as always undergone polishing.

New features in version 1.4

New encoding algorithm is implemented. Now decoding that happens at startup of each encoded script takes by order less time, thus making encoding more applicable for large files.

The code and documentation as always undergone polishing.

New features in version 1.3

Now it's possible to make the obfuscated result to be much more resistant to the analisys by using "do-nothing" licensing conditions generic asserter - the numeric constants from the original source code will be replaced with arithmetic expressions involving variables that are initialized in the additionally encoded block of code ensuring licensing conditions.

The code and documentation as always undergone polishing.

New features in version 1.2

New features in version 1.1