Load javascript only for specific domain?

Question

I want the javascript loaded only on the domain that I specify, while if it is loaded by another domain, the page will be directed to the domain that I specify.

for example, I have a page in domain mydomain.com with some javascript there, then someone copy that javascript from my page and load it in hisdomain.com. Because I have set the script to function only in the domain mydomain.com, so the script will not work in hisdomain.com. Besides, it would be better if hisdomain.com redirected to mydomain.com.

I want to use this method to avoid theft and cloning scripts by people who are not responsible.

Thank you!

You can't. If they're linking directly to the .js file you could only allow certain domains to access it, but if they're copying the contents of the file there's nothing you can really do to stop them - you might be able to block the stupidest of people who can't take out whatever very simple mechanisms you put in (like checking the domain in window.location.href) but it all seems like a huge waste of effort. — Anthony Grist
– Anthony Grist, Commented Aug 11, 2014 at 15:44
Avoiding theft is not really all that practical - anything substantial you should minimize, but beyond that most people are not worried — tofarr
– tofarr, Commented Aug 11, 2014 at 15:44
What's to stop someone downloading the JavaScript, editing the "protection" out, and re-using it? Spend your time building interesting things, not trying (in vain) to protect your script. — Paul Roub
– Paul Roub, Commented Aug 11, 2014 at 15:45

Community · Accepted Answer · 2017-05-23 12:33:33Z

4

I want the javascript loaded only on the domain that I specify, while if it is loaded by another domain, the page will be directed to the domain that I specify.

This should do it:

if (location.host != "your.domain") location.href = "http://your.domain";

I want to use this method to avoid theft and cloning scripts by people who are not responsible.

That line will only help against the case that the other domain includes your.domain/script.js (and steals your bandwidth). When the script is actually copied (and not served from your server), it would be trivial to remove such a line. It's impossible to protect. Rather have a look at How can I obfuscate (protect) JavaScript?

edited May 23, 2017 at 12:33

CommunityBot

11 silver badge

answered Aug 11, 2014 at 15:45

Bergi

671k162 gold badges1k silver badges1.5k bronze badges

Sign up to request clarification or add additional context in comments.

6 Comments

bl4ckbox Over a year ago

how about javascript obfuscator?

Bergi Over a year ago

That's a different question, and still won't hinder them to use the script. Have a look at the link I edited into my answer, though.

bl4ckbox Over a year ago

I mean like this, I will protect my script to only work in my domain by adding code from you. After it, I obfuscate the script, so the if (location.host != "your.domain") location.href = "http://your.domain"; line will not visible without deobfuscate it.

Bergi Over a year ago

It might not be visible or immediately clear, but as soon as you notice the script doing a redirection it will be possible to track down that statement and remove it (or just change the string literal to his.domain). You'd need a very good obfusciator.

bl4ckbox Over a year ago

Thank you, this script useful for me. Any advice for a very good obfuscator, please?

|

Mido23dz · Accepted Answer · 2017-02-05 14:58:56Z

0

this will help

if (location.host == "yourwebsite.com") {

// put your script function here
}
else {
location.href = "http://yourwebsite.com"; 
}

edited Feb 5, 2017 at 14:58

answered Feb 5, 2017 at 14:47

Mido23dz

13 bronze badges

Collectives™ on Stack Overflow

Load javascript only for specific domain?

2 Answers 2

6 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

6 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related