Is there a way to stop Javascript commands being executed in console?

Question

As per the question title.

Although not required; I would like to stop people from executing functions on my page via the console... Is this even possible?

I've tried a few things, this is the closest I've come - but this doesn't work :(

    window.onresize = function(){
        if((window.outerHeight - window.innerHeight) > 100) {
            //stop commands here?
        }
    }
    window.onload = function() {
        if (typeof console !== "undefined" || typeof console.log !== "undefined") {
            if (window.console && (window.console.firebug || window.console.exception)) {
                    //stop commands here?
            }
        }
    }

EDIT:
I don't have to disable the console, just function calls made within it - either solution would be fine though ;)

EDIT2:
So, to get this right... There is now no way of detecting the console crossbrowser at all?

EDIT3:
I've sort of got around it by doing the following, although the JS functions are still in place - the elements that they relate to are not... Not a great fix, but I guess it'll do... :(

        setInterval(function() {
            if (!$.browser.mozilla) {
                if((window.outerHeight - window.innerHeight) > 100) {
                    alert("DISABLED!");
                    $('body').remove();
                    return false;
                }
            }
            if (window.console && (window.console.firebug || window.console.exception)) {
                alert("DISABLED!");
                $('body').remove();
                return false;
            }
        }, 750);

The height check is an especially bad idea. It'll fire for users with too much toolbar space, and won't fire for users running a console in a separate window. — bobince
– bobince, Commented Oct 23, 2012 at 14:59

tobspr · Accepted Answer · 2012-10-23 10:29:59Z

2

It is not good to try detecting console via window width. This may cause some issues on other Browsers, too. If you just want protect your functions:

As you have e.g a button:

<button onclick="someFunction()"></button>

The someFunction is of course accessable via the console. But if you do not let the user know about your function name, he can not call the function, can he? See here:

<script type="text/javascript">
//obsfuscate this code
$(function() {
$("#theButton").on("click", someFunction);
})
</script>
<button id="theButton"></button>

This is just a possible solution. But rembember, no javascript solution can be 100% secure, because the User knows all of your code, obsfuscated or not.

answered Oct 23, 2012 at 10:29

tobspr

8,4265 gold badges36 silver badges48 bronze badges

Sign up to request clarification or add additional context in comments.

11 Comments

Barrie Reader Over a year ago

(420!) I understand, there used to be a way of detecting the console. But this has been removed also - so is there no work around any more? :(

tobspr Over a year ago

As far as I know, not, but why do you need this? maybee there is another way, depends on what you are specially looking for ..

Barrie Reader Over a year ago

I have a load of variables being set up in the JS and I don't want the user to be able to change the values using the console.

tobspr Over a year ago

JavaScript is client side, so the client can change what he wants. The only way is if you move as much as your code/logic to a server - side script ..

Barrie Reader Over a year ago

So, to get this right... There is now no way of detecting the console crossbrowser at all?

|

Collectives™ on Stack Overflow

Is there a way to stop Javascript commands being executed in console?

1 Answer 1

11 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

11 Comments

Your Answer

Sign up or log in

Post as a guest

Related