Nosources Source Maps option

I’d like to obtain full error stack traces with meaningful code lines for bug reporting from obfuscated production code without having to put the source maps on a separate server not accessible by the users.

I’d like something similar to what webpack devTools nosources-source-map option does.

nosources-source-map - A SourceMap is created without the sourcesContent in it. It can be used to map stack traces on the client without exposing all of the source code. You can deploy the Source Map file to the webserver.

Warning It still exposes filenames and structure for decompiling, but it doesn’t expose the original code.

Would it even be feasible with this library also for server-side (node) applications?

[da411d]

https://github.com/javascript-obfuscator/javascript-obfuscator#sourcemapsourcesmode

[lamuertepeluda]

worst part of this so far? even though I use

“sourceMapSourcesMode”: “sources-content”

I see the whole source content inside the .map files 😮

Setting it to sources both removes the content 😌 and solvers the issue in the stack trace.

So, to make it clear to someone else struggling with this on node.js, my working configuration is

{
  "stringArray": true,
  "target": "node",
  "stringArrayRotate": true,
  "exclude": ["node_modules"],
  "sourceMap": true,
  "sourceMapMode": "separate",
  "sourceMapSourcesMode": "sources"
}