Mixing
Are source files (js) required in the apk file?
When releasing the first build for my project, I found out that the APK file APPNAME-release.apk includes my source code.
The whole tree of my project is located in assets folder of the apk file.
I couldn't find in the documentation of tns build any option to exclude the source code from the bundle.
nativescript release source-code-protection
add a comment |
When releasing the first build for my project, I found out that the APK file APPNAME-release.apk includes my source code.
The whole tree of my project is located in assets folder of the apk file.
I couldn't find in the documentation of tns build any option to exclude the source code from the bundle.
nativescript release source-code-protection
add a comment |
When releasing the first build for my project, I found out that the APK file APPNAME-release.apk includes my source code.
The whole tree of my project is located in assets folder of the apk file.
I couldn't find in the documentation of tns build any option to exclude the source code from the bundle.
nativescript release source-code-protection
When releasing the first build for my project, I found out that the APK file APPNAME-release.apk includes my source code.
The whole tree of my project is located in assets folder of the apk file.
I couldn't find in the documentation of tns build any option to exclude the source code from the bundle.
nativescript release source-code-protection
nativescript release source-code-protection
asked Jan 2 at 12:03
user9868652
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Of course your source code is required, without that the app will be void. Even if you build an app with Java for Android, your source code is still there. Decompiling the APK will give you all your Java source code.
So it's recommended to Obfuscate your source code always. With NativeScript, we have Webpack and UglifyJS by default, passing --bundle --env.uglify will make it hard to read. You are free to use any third party JS obfuscation by modifying your webpack.config.js
answered Jan 2 at 12:24
ManojManoj
7,22121024
This the worst news I had since 2018 !
– user9868652
Jan 2 at 12:36
Every client side application (web & mobile apps) carries source code to the client machine. Only server side applications are exceptions where your code runs on host and only the output is carried to client.
– Manoj
Jan 2 at 13:47
@Manoj Java source are not in the apk, contrary to class files naturally. In another hand Mobile apps are not all in client/server architecture.
– elsadek
Jan 2 at 17:17
As I mentioned, it will be available upon simple reverse engineering (decompile). APK is nothing but a kind of zip file, assets (that includes JS) will be visible upon extraction.
– Manoj
Jan 2 at 17:20
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f54006025%2fare-source-files-js-required-in-the-apk-file%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Of course your source code is required, without that the app will be void. Even if you build an app with Java for Android, your source code is still there. Decompiling the APK will give you all your Java source code.
So it's recommended to Obfuscate your source code always. With NativeScript, we have Webpack and UglifyJS by default, passing --bundle --env.uglify will make it hard to read. You are free to use any third party JS obfuscation by modifying your webpack.config.js
answered Jan 2 at 12:24
ManojManoj
7,22121024
This the worst news I had since 2018 !
– user9868652
Jan 2 at 12:36
Every client side application (web & mobile apps) carries source code to the client machine. Only server side applications are exceptions where your code runs on host and only the output is carried to client.
– Manoj
Jan 2 at 13:47
@Manoj Java source are not in the apk, contrary to class files naturally. In another hand Mobile apps are not all in client/server architecture.
– elsadek
Jan 2 at 17:17
As I mentioned, it will be available upon simple reverse engineering (decompile). APK is nothing but a kind of zip file, assets (that includes JS) will be visible upon extraction.
– Manoj
Jan 2 at 17:20
add a comment |
Of course your source code is required, without that the app will be void. Even if you build an app with Java for Android, your source code is still there. Decompiling the APK will give you all your Java source code.
So it's recommended to Obfuscate your source code always. With NativeScript, we have Webpack and UglifyJS by default, passing --bundle --env.uglify will make it hard to read. You are free to use any third party JS obfuscation by modifying your webpack.config.js
answered Jan 2 at 12:24
ManojManoj
7,22121024
This the worst news I had since 2018 !
– user9868652
Jan 2 at 12:36
Every client side application (web & mobile apps) carries source code to the client machine. Only server side applications are exceptions where your code runs on host and only the output is carried to client.
– Manoj
Jan 2 at 13:47
@Manoj Java source are not in the apk, contrary to class files naturally. In another hand Mobile apps are not all in client/server architecture.
– elsadek
Jan 2 at 17:17
As I mentioned, it will be available upon simple reverse engineering (decompile). APK is nothing but a kind of zip file, assets (that includes JS) will be visible upon extraction.
– Manoj
Jan 2 at 17:20
add a comment |
Of course your source code is required, without that the app will be void. Even if you build an app with Java for Android, your source code is still there. Decompiling the APK will give you all your Java source code.
So it's recommended to Obfuscate your source code always. With NativeScript, we have Webpack and UglifyJS by default, passing --bundle --env.uglify will make it hard to read. You are free to use any third party JS obfuscation by modifying your webpack.config.js
answered Jan 2 at 12:24
ManojManoj
7,22121024
Of course your source code is required, without that the app will be void. Even if you build an app with Java for Android, your source code is still there. Decompiling the APK will give you all your Java source code.
So it's recommended to Obfuscate your source code always. With NativeScript, we have Webpack and UglifyJS by default, passing --bundle --env.uglify will make it hard to read. You are free to use any third party JS obfuscation by modifying your webpack.config.js
answered Jan 2 at 12:24
ManojManoj
7,22121024
answered Jan 2 at 12:24
ManojManoj
7,22121024
answered Jan 2 at 12:24
ManojManoj
7,22121024
answered Jan 2 at 12:24
ManojManoj
7,22121024
7,22121024
This the worst news I had since 2018 !
– user9868652
Jan 2 at 12:36
Every client side application (web & mobile apps) carries source code to the client machine. Only server side applications are exceptions where your code runs on host and only the output is carried to client.
– Manoj
Jan 2 at 13:47
@Manoj Java source are not in the apk, contrary to class files naturally. In another hand Mobile apps are not all in client/server architecture.
– elsadek
Jan 2 at 17:17
As I mentioned, it will be available upon simple reverse engineering (decompile). APK is nothing but a kind of zip file, assets (that includes JS) will be visible upon extraction.
– Manoj
Jan 2 at 17:20
add a comment |
This the worst news I had since 2018 !
– user9868652
Jan 2 at 12:36
Every client side application (web & mobile apps) carries source code to the client machine. Only server side applications are exceptions where your code runs on host and only the output is carried to client.
– Manoj
Jan 2 at 13:47
@Manoj Java source are not in the apk, contrary to class files naturally. In another hand Mobile apps are not all in client/server architecture.
– elsadek
Jan 2 at 17:17
As I mentioned, it will be available upon simple reverse engineering (decompile). APK is nothing but a kind of zip file, assets (that includes JS) will be visible upon extraction.
– Manoj
Jan 2 at 17:20
This the worst news I had since 2018 !
– user9868652
Jan 2 at 12:36
This the worst news I had since 2018 !
– user9868652
Jan 2 at 12:36
Every client side application (web & mobile apps) carries source code to the client machine. Only server side applications are exceptions where your code runs on host and only the output is carried to client.
– Manoj
Jan 2 at 13:47
Every client side application (web & mobile apps) carries source code to the client machine. Only server side applications are exceptions where your code runs on host and only the output is carried to client.
– Manoj
Jan 2 at 13:47
@Manoj Java source are not in the apk, contrary to class files naturally. In another hand Mobile apps are not all in client/server architecture.
– elsadek
Jan 2 at 17:17
@Manoj Java source are not in the apk, contrary to class files naturally. In another hand Mobile apps are not all in client/server architecture.
– elsadek
Jan 2 at 17:17
As I mentioned, it will be available upon simple reverse engineering (decompile). APK is nothing but a kind of zip file, assets (that includes JS) will be visible upon extraction.
– Manoj
Jan 2 at 17:20
As I mentioned, it will be available upon simple reverse engineering (decompile). APK is nothing but a kind of zip file, assets (that includes JS) will be visible upon extraction.
– Manoj
Jan 2 at 17:20
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f54006025%2fare-source-files-js-required-in-the-apk-file%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
