Is possible to disable Javascript/Jquery from the browser inspector console?

Question

Hi i was thinking about if there could be any way of disable the ability to change the javascript/jquery from the inspector console?

Just in case you want to avoid that a user interacts and change things from the DOM using the console, or maybe send forms avoiding some checks from javascript.

Or is impossible to do that and you just have to do all the security or this kind of things on the serverside?

Thanks!

Will P. · Accepted Answer · 2014-03-05 17:22:04Z

3

Anything on the client side is never going to be fully secure. This is because it can be manipulated not only by the browser's developer tools, but by any number of other 3rd party tools.

The server itself must be fully secured, because there is no way of guaranteeing that a request is even being made from the web site itself, let alone that the javascript validation was not tampered with.

answered Mar 5, 2014 at 17:22

Will P.

8,8463 gold badges41 silver badges49 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Lapsio Over a year ago

however still I guess it's cool option. At least will prevent getting user info by leaving changed website on some public PCs eg in libraries or something. Most people would only check url

joseantgv · Accepted Answer · 2019-01-10 15:04:53Z

0

Yes to disable the console just run this on the client

Object.defineProperty(console, '_commandLineAPI', {
    get : function() {
        throw "Console is disabled";
    }
});

This won't leave then to use the console.

Note: There isn't a 100% secure option to get around this, but at least doing this won't allow console usage. Add security to your server to see which request are legit.

Also this will only work in Chrome this is because Chrome wraps all the console code in:

with ((console && console._commandLineAPI) || {}) {
  <code area>
 }

Firefox has a different way to wrap the code from the console. This is why this is not a 100% secure protection from console commands

edited Jan 10, 2019 at 15:04

joseantgv

2,0232 gold badges29 silver badges35 bronze badges

answered Mar 5, 2014 at 17:22

Eduardo Quintana

2,3881 gold badge16 silver badges20 bronze badges

10 Comments

zzzzBov Over a year ago

except that anyone could run some javascript from the URL anyway, which could embed their own custom console, or simply remove what you've added.

victorgb6 Over a year ago

The point is that i don't wont to disable javascript, just the abilty to execute javascript from inspector console.

Eduardo Quintana Over a year ago

There is no 100% secure options but at least with this they can't just press F12 and send a $.ajax with the info they want. Even Facebook has this on his login page.

Eduardo Quintana Over a year ago

Edited this will disable the console. The javascript will work as normal but the console will be disabled it will return the error.

Eduardo Quintana Over a year ago

But yes as @Will says the server itself must be fully secured to see which request to respond.

|

Collectives™ on Stack Overflow

Is possible to disable Javascript/Jquery from the browser inspector console?

2 Answers 2

1 Comment

10 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

10 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related