Nashorn中的编码/解码Javascript

Question

I use the technique described here: http://scriptasylum.com/tutorials/encode-decode.html

In a nutshell, one has a javascript file that looks like this, where the actual javascript is encoded:

document.write( unescape( 'escaped string' ) ); dF('encoded javascript');

I now want to run that same .js module under Nashorn, but Nashorn does not have a document object. Therefore, I can not do document.write().

Note: It is well known that this technique is easily bypassed and people modest technical ability can still look at the actual code. My use case does not require strong security so that is not a concern. That said, Please consider answers on why one should not do this as off topic. Thanks.

Answer 1

Basically, that code breaks down into two parts:

1. Un-obfuscate the string via unescape .

2. Write the string out via document.write.

It sounds like you want to use the string directly for some reason.

You have at least two options:

1. You can provide a document object to the scripting engine with a write method that accepts a string. Then you can do with it what you like. (Or substitute document.write before evaluating the string with any function you want called.)

2. Remove the document.write( and the corresponding ) at the end and have the engine evaluate the string and hand it to you directly as the result of ScriptEngine#eval .

Either way, you'll end up with a string that you can then do something with.