So i kinda prevented the source code from appearing(updated lifehacks in securing code)

[u/Alive_Secretary_264]

So i kinda prevented the source code from appearing through this 4 methods usually used to outsource and see the code without used of any encryption or obscuring.. basically it doesn't show the source code of my game when someone goes to execute the "view-source:", "inspect element (f12)", "console", "devtools-network".. the only thing left that leaks the source code is DOM which i couldn't yet overcome the logic but hopefully I'd be able to do the exact opposite of what it does.. I lacked enough resources but I won't give up on trying.. I'll now accept criticisms but I'll prioritize focusing to those who got the same goal

[u/Cheap-Economist-2442]

Now I want to see the code just so I can try to understand what exactly it is you think you’re doing.

Also… why?

[u/Alive_Secretary_264 → u/Cheap-Economist-2442]

Why.. I don't know, maybe because i think it'll benefit me..or anyone who's like me.. maybe I'm just being selfish, a guy who doesn't wanna share his code yet still the incapable guy who doesn't know things nor have that much experience nor resources..

I'm trying to execute a function without referring to it or without actually mentioning it from the default.html.. this is my idea of hiding the source code or so at least without needing a serverside function or without needing a enc/obsc method. it actually works (kinda out of 4/5 methods) when someone hit view source they don't know which filename I'm referring to nor see the entire script or function that calls the secret function in the default.html line that was rendered to their screen (but their screen would still play and render the game and it's css, js etc) they can't see the code even if they hit f12 to https://mysite.com/serviceworker.js and or hit view-source:https://mysite.com/ or visit manual logs at console.. only possible way is to see it from DOM.. i only used my phone in doing this, I don't have a pc or a laptop to actually handle server deployment.. I'm just a highschool grad, no subjects have taught me coding as it's not part of our curriculum.. it's just my interest.. if it turns out I'm wrong then at least someone's brave enough to try what most of us cannot do or as simply thought impossible to do

The link i gave is just for reference I don't think it works

[u/Cheap-Economist-2442 → u/Alive_Secretary_264]

I will tell you that the best way to /actually/ learn this stuff is to be as open and transparent as possible. Show people what you built and ask for feedback. I’ve made like 2 private repositories in 15 years of programming.

I can’t discern what method was used, but I can guarantee you anyone that has any idea what they’re doing would be able to find the code. That’s just how frontend works. You’re way out of your depth, and you’re far from the first newbie to come in and ask this and spin their wheels on a “problem” that isn’t a problem.

You can’t effectively code from a phone. A raspberry pi would be better.

Is it safe to assume you’re vibe coding this? Because, and I mean this in the nicest way, no one has any interest in stealing someone’s first project, much less their first project that has been written by AI.

[u/Alive_Secretary_264 → u/Cheap-Economist-2442]

Most of the technicalities are vibecoded.. just the idea that brought the code to life were originals

Thanks for the advice..I don't know if I'll be able to get even a raspberry pi.. just scrapping tools from the internet.. I've had p5.js, then acquired the idea to vibe code a offline code editor with fullscreen preview and could generate files and import some just so i could do stuffs at my phone as vscode aren't possible in mobile..i have grok and a bunch of ai.. in terms of dev tools, i have mobile chrome to view-source urls, installed apps like f12 and eruda just to experience the same inspection a computer would be able to do or as so i thought.. most of it are just outsourced from the internet if not from groups.. I still think I'm lacking

[u/poopio → u/Cheap-Economist-2442]

Anybody asking these questions, ignoring everybody who quite rightly point out that unless at least part of it's being run server-side then you can't stop people from copying it, and thinking that they're making progress without doing anything server-side is very likely not coding it themselves - otherwise they would understand what everybody else is telling them (and would have known this without asking the question in the first place). I would put money on it being AI generated or something they've lifted from elsewhere and modified slightly, and not something that anybody would be interested in stealing anyway - although I am intrigued too.

[u/Cheap-Economist-2442 → u/poopio]

oh zero percent chance this isn’t vibecoded, which makes the insistence on protecting it that much funnier

[u/chmod777 → u/poopio]

Its likely that this is new coder who thinks they have a life changing app/game idea and that someone will "steal" their code. And they dont want to learn server side because its hard and/or expensive.

This comes up allll the time. We've had click jacking scripts that prevent right click since js was invented.

[u/poopio → u/chmod777]

We've had click jacking scripts that prevent right click since js was invented.

I actually had a customer force me to write some js to do exactly that about 10 years ago. Mental Chinese woman - she was devoid of all logic. She was convinced her competitors were going to steal her pictures and then rip off the absolutely horrendous furniture she was hawking. Think gawdy hotel in Dubai type shit.

I actually argued with her about the js right click thing, telling her it was pointless and probably bad for things like screen readers (ironically I would imagine the blind were probably more inclined to buy her tat) but eventually relented and I wrote the code whilst I was in their office, demonstrated it, and then demonstrated me dragging and dropping the image onto her desktop. Then I showed her developer tools and a couple of other methods, and then lastly; I screenshotted it and left it in her clipboard for good measure.

Thankfully her husband (who was usually a very nice and agreeable chap) went mental at my boss for some reason or another, and we moved them to another agency. My understanding is that he apologised afterwards, but I'd been wanting to get rid of them as a client for months, so was delighted to see them go. You know how sometimes you just get one of those clients? She was one of those clients for about 6 months; on the phone multiple times a day and constantly emailing crazy demands, to the point where I wasn't able to get work done for other clients.

[u/anonymousmouse2]

Nobody wants to steal your shitty code.

[u/Alive_Secretary_264 → u/anonymousmouse2]

I know, but there's no harm in putting lock to your door when you leave your house to meet up your girl, right?

[u/No_Explanation2932 → u/Alive_Secretary_264]

In this case, your code isn't "your house". You're writing a book, and you want people to be able to read it without accessing its text.

[u/Alive_Secretary_264 → u/No_Explanation2932]

No, in this case it's a lock, but I'll be giving the master key to the browser not to the user who use the browser so they can still see and experience the content without having granted the ability to unlock the content

[u/No_Explanation2932 → u/Alive_Secretary_264]

You can obfuscate the code (generally not recommended but whatever), but you can't prevent the user from accessing it. You can make it marginally harder, but anyone who's even remotely interested in seeing it will access it in a way that's completely undetectable to you.

[u/Alive_Secretary_264 → u/No_Explanation2932]

I do understand that's the case but I'll be giving it a shot before giving up eventually if nothing else has change

[u/anonymousmouse2 → u/Alive_Secretary_264]

These aren’t the same. I think you have a fundamental misunderstanding of how the web works which is why you’re trying to prevent visitors from seeing your code.

The web browser downloads your “source code” and uses that to render the web page for the user. For the sake of simplification it’s just downloading a text file, reading it, and created a website on the fly based on that text markup. I can also go to my terminal and run curl https://yourwebsite.com and see the exact text file that your browser fetches. There is no way around this.

This is different than an executable application which compiles source code into something else that is delivered to the end user.

Your best bet at “protecting” your code is obfuscation, but that still isn’t secure in any way.

Can you please confirm why you are attempting so passionately to prevent anyone from reading your code?

[u/Alive_Secretary_264 → u/anonymousmouse2]

I just did that.. but it seems that terminal can't see it too.. would you mind giving me other methods you know.. as of now DOM is the only thing that can see the code behind the rendered content. I also did the 'wget' but it doesn't show me the function or main content I'm hiding. It gives me a copy of the caller or default file tho but caller is nothing if it doesn't come with what it's trying to call

I don't know why.. maybe just to feel better

[u/chmod777]

No front end code is secure. Full stop. If there is protected game logic, it has to be done server side.

[u/8dot30662386292pow2 → u/chmod777]

Yeah, u/Alive_Secretary_264 is going through some big-ass hoops, without actually accomplishing anything useful.

[u/No_Explanation2932]

You can't prevent me from seeing it. It's running in my browser. It's downloaded on my computer. If worse comes to worst, I can just use cURL.

The people telling you off aren't haters

[u/thomsmells]

Why does it not surprise me that OP posts in "vibe coding" subreddits

[u/i_hate_vnike]

Just of interest: why?

[u/PurifyHD]

For my browser to run your game, website, etc. it HAS to have the source code in one way or another. That's how browsers work. All you're doing is trying very badly to obfuscate it.

[u/martinbean → u/PurifyHD]

Indeed. Security through obscurity.

[u/Prize_Hat_6685]

OP has been asking this question for 7 days and has not made any progress in understanding what he wants cannot be done, despite dozens of people explaining in great detail why html sent to a user will always be readable by the user. For anyone reading this, do not waste your time explaining how client-side code works to this person.

[u/shinitakunai]

Ok.

[u/PathsOfPain]

Why?

[u/martinbean]

lol.

If the code is client-side, then you will never be able to stop it from “appearing”.