default browser coutermeasure doesn't crash the browser.. about js-confuser HOT 4 OPEN

You are right. The new behavior will just be an infinite loop as the default countermeasure. I will change this for next update.

from js-confuser.

An infinite loop can be easily stopped by just pressing the "Pause script execution" button in devtools.
There are better ways to crash a tab like spamming iframes. (this absolutely kills devtools if it runs for a few seconds)

for(;;) {
    let a = document.createElement("iframe");
    a.src = "data:,"
    document.body.append(a)
}

EDIT: edited to replace "/" with data:,, so it doesnt dos your webserver. Lot more effective now too.

from js-confuser.

Maybe the countermeasure should be configurable?

Some may want to just pause script execution, and others crash the page..

from js-confuser.

@fuzzbuck The countermeasures is configurable by setting it a string, it can be a custom callback. This issue is related to the default behavior (no value provided) is incorrect. I like @Le0Developer 's code snippet and it will be the default behavior

from js-confuser.