I have a question : what's the purpose of the *.js encryption while it's easy to retrieve the AES256 key ( stored somewhere or gathered over network ) to decipher the encrypted files ? An extra security layer against Script Kiddies ? Doesn't that affect the performance of the app in every-runtime-decryption stage ?
By following the execution flow of this application, any security expert can use several tools to get the plaintext js files.
I have a question : what's the purpose of the *.js encryption while it's easy to retrieve the AES256 key ( stored somewhere or gathered over network ) to decipher the encrypted files ? An extra security layer against Script Kiddies ? Doesn't that affect the performance of the app in every-runtime-decryption stage ?
By following the execution flow of this application, any security expert can use several tools to get the plaintext js files.