I have some sensitive Javascript in a Chrome Extension that I do not want to be visible to clients. Is it possible to secure this code through obfuscation. I am not looking to ‘put a few obstacles’ in the way, I am looking for 100% complete security where whoever is using the Chrome Extension has no way of understanding the Javascript.
Because if not, all it takes is one person to unobfuscate the code and I would have a disaster on my hands. So, is this possible?
No, this is not possible!
Every bit of code which runs on a machine can be unobfuscated, even *.exe files! Due to using JavaScript, this is much more simplier.
You should move the sensitive part of your application to an external resource (e.g. a server). Never put sensitive logic in the client!