obfuscator breaks code string.split(" ") not working.

[tamis-laan]

I'm receiving a JWT token I need to verify, which I split to get the token and remove the word bearer:

    const bearerHeader = req.headers['authorization'];
    const bearer = bearerHeader.split(" ")

With obfuscation on I get:

[
  'Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE1OTgyNjU5NjksImlhdCI6MTU5ODI2NTM2OX0.gYp5wThUw8E7F-I0yhOvMuCwWkCNd8v1XomsWKnm2ss'
]

With obfuscation off I get:

[
  'Bearer',
  'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE1OTgyNjU5NjksImlhdCI6MTU5ODI2NTM2OX0.gYp5wThUw8E7F-I0yhOvMuCwWkCNd8v1XomsWKnm2ss'
]

Looks like white spaces are replaced with some other character that breaks the split(" ") code. I also noticed a bunch of \x20 in my console output instead of spaces. What gives? How can I fix this?

[sanex3339]

Hi. Yes, obfuscator encodes some characters (including spaces) with unicode escape sequences. But it shouldn't break the code.

For example:

console.log('a b'.split('\x20')); // ['a', 'b']
console.log('a\x20b'.split('\x20')); // ['a', 'b']
console.log('a\x20b'.split(' ')); // ['a', 'b']

[sanex3339]

May you create a simple standalone example that will produce the wrong array with 'split' here:
https://obfuscator.io/

[tamis-laan]

Well it doesn't break my front end, but I'm using it also for my backend (nodejs). I have found a work around by using the option preserveWhiteSpace:true. This allows for the code to run correctly. The code example above is from my backend.

[sanex3339]

preserveWhiteSpace - where did you get this option?

[tamis-laan]

Oef can't trace back where I found it. It was on a github issue page related to vue.js which was not working. Someone proposed the option as a fix.

[sanex3339]

Obfuscator does not have preserveWhiteSpace option

[tamis-laan]

That's strange! I basicaly changed the webpack command from:

const obfuscator = require('webpack-obfuscator');
new obfuscator({rotateStringArray: true},[])

to

const obfuscator = require('webpack-obfuscator');
new obfuscator({rotateStringArray: true,preserveWhitespace: true})

And now things work correctly

[sanex3339]

What webpack-obfuscator version are you using?

[sanex3339]

Obfuscator never supports preserveWhitespace option. So please check that it produces obfuscated code with preserveWhitespace option.

[tamis-laan]

I use version: 1.11.0 and it does produce obfuscated code using the preserveWhitespace option. Not sure whats going on, maybe it's because I changed:

new obfuscator({rotateStringArray: true},[])

to

new obfuscator({rotateStringArray: true})

[sanex3339]

May you create a small standalone repo with this bug. I want to investigate this bug and how this unexisting option affects it.

[sanex3339]

Any news?

[tamis-laan]

I can't send over the code and replicating the bug will take some time. Time and don't have atm.