my dog learned polymorphism*
The moose likes Security and the fly likes need of obfuscation code with web application and how to do it Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of OCA/OCP Java SE 7 Programmer I & II Study Guide this week in the OCPJP forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "need of obfuscation code with web application and how to do it" Watch "need of obfuscation code with web application and how to do it" New topic
Author

need of obfuscation code with web application and how to do it

kalai arasan
Greenhorn

Joined: Aug 18, 2009
Posts: 26
hi,

I want to create Helloworld source code to obfuscation code with freeware obfuscator such as proguard 4.4 etc.....

I am using java 1.4 and struts 1.1.commanly through struts-config.xml file we are calling the action class with the relevant method name and property name.

In proguard 4.4 ,they have explained that the shrinking step detects and removes unused classes, fields, methods, and attributes. The optimization step analyzes and optimizes the byte code of the methods. The obfuscation step renames the remaining classes, fields, and methods using short meaningless names.

If obfuscator changes the method and all , how can struts-config.xml file finds out which method to call in action class.
It should method all method in jsp and action class as well as struts-config.xml file also. Then what is the need of obfuscation code.



How to make obfuscation code on web application

Java collection frame work is backward compatibility ,it wont support java 1.5 and above version. In progaurd, they have mentioned that the final preverification step adds preverification information to the classes, which is required for Java Micro Edition or which improves the start-up time for Java 6.


I am getting confusion to do obfuscation.

Can anyone make me to clear about this article please.
Ulf Dittmer
Marshal

Joined: Mar 22, 2005
Posts: 42360
    
  64
I'm not quite sure about what you're asking exactly, but be aware that it is generally not necessary to obfuscate web app code, because the code is never made available to the users of the web app.

If you still want to do it, and need to keep certain method or class names (for Struts or some other framework), then you need to employ the various "keep options" discussed in the ProGuard manual. Note that modern web frameworks rely heavily on the reflection API, which breaks when obfuscation is used.


Ping & DNS - my free Android networking tools app
kalai arasan
Greenhorn

Joined: Aug 18, 2009
Posts: 26
hi while running proguard4.4

java -jar proguard.jar @myconfig.pro -verbose

i am getting error as Unable to access jarfile proguard.jar

can any one help me to retrieve this problem.
kalai arasan
Greenhorn

Joined: Aug 18, 2009
Posts: 26
I want to do my own obfuscation with proguard in my product particular screen only,how can i eliminate rest of the modules
help me to do this
kalai arasan
Greenhorn

Joined: Aug 18, 2009
Posts: 26
thanks
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: need of obfuscation code with web application and how to do it