GeezerVison

Summary

• Add obfuscateBuiltins option: transforms built-in JavaScript identifiers (console, Math, JSON, Object, etc.) into globalThis['name'] computed access patterns
• Add obfuscateApiCalls option: transforms API method calls (document.getElementById, fetch, etc.) into globalThis-based indirect access
• Both options create string literals extractable by StringArrayTransformer for maximum obfuscation

Key Design Decisions

• Stage: Converting (after scope analysis, before identifier renaming)
• Technique: console → globalThis['console'] — creates string literals for StringArray extraction
• Safety: Scope-aware (skips user-defined variables that shadow built-ins), target-aware (browser vs node), reservedNames-compatible
• Defaults: Both false by default. obfuscateBuiltins: true in high-obfuscation preset

Changes

New Files (8)

• src/constants/BuiltinIdentifierNames.ts — Categorized built-in lists (Core JS, Browser, Node.js)
• src/node-transformers/converting-transformers/BuiltinsObfuscationTransformer.ts
• src/node-transformers/converting-transformers/ApiCallsObfuscationTransformer.ts
• Test specs and fixtures (5 files)

Modified Files (9)

• Options: IOptions.ts, Options.ts, Default.ts, HighObfuscation.ts, NoCustomNodes.ts
• Pipeline: NodeTransformer.ts, JavaScriptObfuscator.ts, ConvertingTransformersModule.ts
• CLI: JavaScriptObfuscatorCLI.ts

Test plan

• 12 BuiltinsObfuscationTransformer tests (basic builtins, shadowed vars, property access, reserved names, disabled option)
• 5 ApiCallsObfuscationTransformer tests (DOM APIs, fetch, disabled option)
• 202 existing converting transformer tests pass (no regression)
• 19 issue regression tests pass
• ESLint clean (pre-commit hook)

Examples

// obfuscateBuiltins: true
console.log('hello') → globalThis['console']['log']('hello')
Math.random()        → globalThis['Math']['random']()

// obfuscateApiCalls: true
document.getElementById('x') → globalThis['document']['getElementById']('x')
fetch(url)                    → globalThis['fetch'](url)

SPEC: SPEC-OBFUSCATION-001

🗿 MoAI [email protected]